ML17262A409: Difference between revisions
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
||
Line 46: | Line 46: | ||
~ | ~ | ||
U I eI e A L | U I eI e A L | ||
~1 AevAaUe UONTN wlweA OAY YIAA ~ ACIUTY N*ULI OOCAIT NVUICA>>I 0 6 0 0 0 1 2 1 2 9 0 9 0 0 1 7 0 1 0 30891 0 6 0 0 0 OeIAATINO TN>> ACCOAT>> WIUITTIOeVAIUAN'fT 0 TIIC 1lovl1CUINTI oe IlcJA II Iceaea eee <<aUae el VU 'Ua<<wel 1111 IIOOC I~ I Il.eOIIII Tl.eNleI N.TIWQIINI 1 LTI ILI | ~1 AevAaUe UONTN wlweA OAY YIAA ~ ACIUTY N*ULI OOCAIT NVUICA>>I 0 6 0 0 0 1 2 1 2 9 0 9 0 0 1 7 0 1 0 30891 0 6 0 0 0 OeIAATINO TN>> ACCOAT>> WIUITTIOeVAIUAN'fT 0 TIIC 1lovl1CUINTI oe IlcJA II Iceaea eee <<aUae el VU 'Ua<<wel 1111 IIOOC I~ I Il.eOIIII Tl.eNleI N.TIWQIINI 1 LTI ILI | ||
~ OIVCA IILINNIII ILI NMlellll N.NNIQhet TATIW LCVIL p p IO.CNIe Ill I Ill NMWQI N,fIIII Ql leel oTIIIA /Caaaaf Ie AAaaeat eaN<<eacla TeeL NAc/N<< | ~ OIVCA IILINNIII ILI NMlellll N.NNIQhet TATIW LCVIL p p IO.CNIe Ill I Ill NMWQI N,fIIII Ql leel oTIIIA /Caaaaf Ie AAaaeat eaN<<eacla TeeL NAc/N<< | ||
Line 73: | Line 72: | ||
vsC f OAQ $ 00A teal | vsC f OAQ $ 00A teal | ||
~ <<AC SccNc SSSA V.S. NVCLSAII ASOULATOIIYCOMMISSION | ~ <<AC SccNc SSSA V.S. NVCLSAII ASOULATOIIYCOMMISSION | ||
$ 4SI LICENSEE EVENT REPORT (LER) TEXT CONTINUATION Aft<<OVSO OMS NO SISOMIOC S)tPIIISS 4ISI/IS SACILITY HAM% III OOClcKT HVMISA ITI LSII NVMSSII ISI AAOS ISI NSAII SCOVCNTIAL ASV<<ION Nvcc TN ~ Nvr Cr R.E. Ginna Nuclear Power Plant o s o o o 2 4 4 90 01 7 0 1 03 pal 5 TKXT IllcNrr <<Wce r ctowecI. uM CcNH<<crl ITIC %%d ~'CI IITI The Station Electrical Planner then initiated, "Work Request or Trouble Report" Number 9024136, reviewed applicable drawings and prepared a work package (i.e. work order number 9024136) which included PORC approved Main-tenance procedure M-48.14 (Xsolation of Bus 14 Undervoltage System for Maintenance, Troubleshooting, Rework and Testing). The work package was then reviewed by the Planner Scheduler for compliances with administrative requirements. The Electrical Planner then performed required notifications of the QC Engineer and a Results and Test technician, and briefed them on the contents of the work package. The Electrical Planner took the work package to the Electric Shop and reviewed electricians who were to perform the work. | $ 4SI LICENSEE EVENT REPORT (LER) TEXT CONTINUATION Aft<<OVSO OMS NO SISOMIOC S)tPIIISS 4ISI/IS SACILITY HAM% III OOClcKT HVMISA ITI LSII NVMSSII ISI AAOS ISI NSAII SCOVCNTIAL ASV<<ION Nvcc TN ~ Nvr Cr R.E. Ginna Nuclear Power Plant o s o o o 2 4 4 90 01 7 0 1 03 pal 5 TKXT IllcNrr <<Wce r ctowecI. uM CcNH<<crl ITIC %%d ~'CI IITI The Station Electrical Planner then initiated, "Work Request or Trouble Report" Number 9024136, reviewed applicable drawings and prepared a work package (i.e. work order number 9024136) which included PORC approved Main-tenance procedure M-48.14 (Xsolation of Bus 14 Undervoltage System for Maintenance, Troubleshooting, Rework and Testing). The work package was then reviewed by the Planner Scheduler for compliances with administrative requirements. The Electrical Planner then performed required notifications of the QC Engineer and a Results and Test technician, and briefed them on the contents of the work package. The Electrical Planner took the work package to the Electric Shop and reviewed electricians who were to perform the work. | ||
Line 111: | Line 109: | ||
~ oeaecver A'c fons Ia'llII' 5 o o o 24 490 01 7 0 106 ovl 5 P OPERATOR ACTION: | ~ oeaecver A'c fons Ia'llII' 5 o o o 24 490 01 7 0 106 ovl 5 P OPERATOR ACTION: | ||
Factors that influenced operator actions during the event were as follows: | Factors that influenced operator actions during the event were as follows: | ||
0 The Control Room operators questioned step 5.5.1 in procedure M-48.14, but information in M-48. 14, the DC switch labels, and Alarm Response procedure AR-L-31 did not provide | 0 The Control Room operators questioned step 5.5.1 in procedure M-48.14, but information in M-48. 14, the DC switch labels, and Alarm Response procedure AR-L-31 did not provide sufficient operational information to determine the consequences of opening these two switches. | ||
sufficient operational information to determine the consequences of opening these two switches. | |||
o The Control Room operators had confidence in a Plant Operating Review Committee (PORC) approved procedure that had also been reviewed by the Electrical Planner. | o The Control Room operators had confidence in a Plant Operating Review Committee (PORC) approved procedure that had also been reviewed by the Electrical Planner. | ||
As the event was over prior to discovery, no operator actions other than normal were performed. | As the event was over prior to discovery, no operator actions other than normal were performed. | ||
Line 157: | Line 153: | ||
ASASOASI IYJIC Anti Plant | ASASOASI IYJIC Anti Plant | ||
~'S I IITI o s o o o 24 490 SSQMSNTIAL ' 'SVOIO> | ~'S I IITI o s o o o 24 490 SSQMSNTIAL ' 'SVOIO> | ||
01 M A 7 0 M S1 10 90sl 5 The effect of the potential delay in actuating safeguards equipment upon those events analyzed in the UFSAR was | 01 M A 7 0 M S1 10 90sl 5 The effect of the potential delay in actuating safeguards equipment upon those events analyzed in the UFSAR was evaluated. The accidents effected by this action are those accidents which result in depressurization of the primary system causing SI. These are primarily the following: | ||
evaluated. The accidents effected by this action are those accidents which result in depressurization of the primary system causing SI. These are primarily the following: | |||
o Feed Line Break (FLB) o Steam Generator Tube Rupture (SGTR) o Small Break Loss of Coolant Accident (SBLOCA) o Large Break Loss of Coolant Accident (LOCA) o Small Steam Line Break (Small SLB) o Large Steam Line Break (SLB) | o Feed Line Break (FLB) o Steam Generator Tube Rupture (SGTR) o Small Break Loss of Coolant Accident (SBLOCA) o Large Break Loss of Coolant Accident (LOCA) o Small Steam Line Break (Small SLB) o Large Steam Line Break (SLB) | ||
An analysis of these accidents was performed to determine the effect of the disabling of manual (pushbutton) and automatic actuation of the safeguards sequence initiation with the following results: | An analysis of these accidents was performed to determine the effect of the disabling of manual (pushbutton) and automatic actuation of the safeguards sequence initiation with the following results: |
Latest revision as of 09:49, 4 February 2020
ML17262A409 | |
Person / Time | |
---|---|
Site: | Ginna |
Issue date: | 03/08/1991 |
From: | Backus W, Mecredy R ROCHESTER GAS & ELECTRIC CORP. |
To: | NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
References | |
LER-90-017, LER-90-17, NUDOCS 9103130115 | |
Download: ML17262A409 (34) | |
Text
ACCELERATED DISJBUTION DEMONST~ION SYSTEM REGULATORY INFORMATION DISTRIBUTION SYSTEM (RXDS)
ACCESSION NBR: 9103130115 DOC. DATE: 91/03/08 NOTARIZED: NO DOCKET FACIL:50-244 Robert Emmet Ginna Nuclear Plant, Unit, 1, Rochester G 05000244 AUTH. NAME AUTHOR AFFILIATION BACKUS,W.H. Rochester Gas & Electric Corp.
MECREDY,R.C. Rochester Gas & Electric Corp.
RECIP.NAME RECIPIENT AFFILIATION
SUBJECT:
LER 90-017-01:on 901212,two DC switches opened causing disabling of manual automatic actuation of safeguards sequence initiation. Caused by inadequate procedures. D Procedures revised.W/910308 ltr.
DISTRIBUTION CODE: IE22D COPXES RECEIVED:LTR ENCL SIZE:
TITLE: 50.73/50.9 Licensee Event Report (LER), Incident Rpt, etc.
NOTES:License Exp date in accordance with 10CFR2,2.109(9/19/72). 05000244 A D
RECIPIENT COPIES RECIPIENT COPIES ID CODE/NAME LTTR ENCL ID CODE/NAME LTTR ENCL D PD1-3 LA 1 1 PD1-3 PD 1 1 JOHNSON,A 1 1 INTERNAL: ACNW 2 2 AEOD/DOA 1 1 AEOD/DSP/TPAB 1 1 AEOD/ROAB/DSP 2 2 NRR/DET/ECMB 9H 1 1 NRR/DET/EMEB 7E 1 1 NRR/DLPQ/LHFB11 1 1 NRR/DLPQ/LPEB10 1 1 NRR/DOEA/OEAB 1 1 NRR/DREP/PRPB11 2 2 NRR/DST/SELB 8D 1 1 NRR/DST/SICB 7E 1 1 N LBBD1 1 1 NRR/DST/SRXB 8E '. 1 1 02 1 1 RES/DSIR/EIB 1 RGN1 FILE 01 1 1 EXTERNAL: EG&G BRYCE,J.H 3 3 L ST LOBBY WARD 1 1 NRC PDR 1 1 NSXC MAYS,G 1 1 R NSIC MURPHY,G.A 1 1 NUDOCS FULL TXT 1 1 D
tyfl'tY+~ f D
D NOTE TO ALL "RIDS" RECIPIENTS:
PLEASE HELP US TO REDUCE WASTE! CONTACT THE DOCUMENT CONTROL DESK, ROOM P 1-37 (EXT. 20079) TO ELIMINATEYOUR NAME FROM DISTRIBUTION LISTS FOR DOCUMENTS YOU DON'T NEED!
TOTAL NUMBER OF COPIES REQUIRED: LTTR 31 ENCL 31
n r roar srAsc C~'iltd~~~lfllkl!Ill!~
ROCHESTER GAS AND ELECTRIC CORPORATION ~ 89 EAST AVENUE, ROCHESTER N. Y. 14649-0001 ROBERT C. MECREDY TELEPHONE Vice President AREA COOET16 546'2700 Cinna Nuclear Producrion March 8, 1991 U.S. Nuclear Regulatory Commission Document Control Desk Washington, DC 20555
Subject:
LER 90-017, (Revision 1) Opening of DC Switches (Procedural Inadequacy) Disables Manual and Auto Actuation of Safeguards Sequence Initiation Causing a Condition Outside the Design Basis of the Plant R.E. Ginna Nuclear Power Plant Docket No. 50-244 In accordance with 10 CFR 50.73, Licensee Event Report System, item (a)(2)(ii)(B), which requires a report of, "any event or condition that resulted in the condition of the nuclear power plant, including its principal safety barriers, being seriously degraded, or resulted in the nuclear power plant being in a condition that was outside the design basis of the plant", the attached Licensee Event Report LER 90-017 is hereby submitted.
This revision is necessary to revise section IV (Analysis of Event) due to new information being received.
This event has in no way affected the public's health and safety.
Ver truly yours, OLc Robert C. Mec edy xc: U.S. Nuclear Regulatory Commission Region I 475 Allendale Road King of Prussia, PA 19406 Ginna USNRC Senior Resident Inspector 9103130115 91030S PDR ADOCK 05000244 S PDR
~ IAC Aeeae IN UA IIVCLIAAAIOVLATOAV COINIMAIN
>>O$ 1 AceAovlo oNI INL$ IN 0lov LICENSEE EVENT REPORT ILER) CA&VIII I/$ 1/ ~ I CACIUTY NAeel lll OOCAIT Nve>>IA Ql R.E. Ginna Nuclear Power Plant 0 6 0 0 0 2 4 4
"'~'" Opening of DC Switches Disables Manual and Auto Actuation o Safeguards T Of 1 5 ence In>.tiation, Causin a Condition Outside the Desi Basis of the Plant IVCNT OATS III LCA NVe>>CA III AleOAT OATI Ih OTNI1 CACIUTIIIINVOLVIOell UONTII OAY YCA1 YCAI I I0eUUe
~
U I eI e A L
~1 AevAaUe UONTN wlweA OAY YIAA ~ ACIUTY N*ULI OOCAIT NVUICA>>I 0 6 0 0 0 1 2 1 2 9 0 9 0 0 1 7 0 1 0 30891 0 6 0 0 0 OeIAATINO TN>> ACCOAT>> WIUITTIOeVAIUAN'fT 0 TIIC 1lovl1CUINTI oe IlcJA II Iceaea eee <<aUae el VU 'Ua<<wel 1111 IIOOC I~ I Il.eOIIII Tl.eNleI N.TIWQIINI 1 LTI ILI
~ OIVCA IILINNIII ILI NMlellll N.NNIQhet TATIW LCVIL p p IO.CNIe Ill I Ill NMWQI N,fIIII Ql leel oTIIIA /Caaaaf Ie AAaaeat eaN<<eacla TeeL NAc/N<<
IO.ANW II II>>I N.f$ W Q I III NP INIQ IIIAAIAI SCCA/
IOANWIIII>>I X N.f$ 4 I QI I II ~ O.f $ NIIIIIe>>I>>l
$ O.CNWIIIIII N.T Sle IQI I Wl IO.TIWQllal lICINICICONTACT COA TNII LC1 ILTI NAUI TILCIUONI NUUIIA Wesley H. Backus AAIACOOl Technical Assistant to the Operations Manager 31 5524- 446 COeeellf I ONI LINC COA CACN CoeeeONCNT CAILUAC OIICAIIIOUe TN>> AICOAT 11$ 1 CAUII IYITIU coee/oNINT UANU/ACi TVIICA CAUII l Vlf lie COUIONINT UANUCAC TUAIA leOATAIL TO NTIIOI WAW 1:Yga a
'( %j"" '$>gg IVYYLIUINTALAIIOAT IAeICTIO I lee ~U ONTII CAY Y CAN IxeICTIO WIIIICCION OATI IIII Yll /I/ fee, aaeUeeN CCJCCTCO CVCNIIIIONOA TC/
~ ACTAACT /Leaee ee leoI Uea<<, I.A, eA<<eeeaeaea /IINaa IUceewce lfceeaIINa Aeev lice On December 12, 1990, at 2310 EST, with the reactor at approximately 34 full power, the Control Room Foreman opened two DC switches, as directed by a Maintenance procedure, causing the disabling of manual (pushbutton) and automatic actuation of the safeguards sequence initiation.
The two DC switches were closed, as directed by the Maintenance procedure, approximately twenty (20) minutes later, restoring manual (pushbutton) and automatic actuation initiation.
The underlying cause of the event was procedure inadequacy due to insufficient attention to detail.
Extensive corrective actions are being taken to prevent recurrence, including communication of management expectations, HPES evalua-tions, identifying procedural inadequacies, and a comprehensive upgrade of the procedure change 'process.
IIAC e<<e IN
>>4$ l
MAC fons $ 00A V.$ , IIVCLTAIIACOULATOIIYCOMMISSION I00$ I LICENSEE EVENT REPORT ILERI TEXT CONTINUATION AffAOV$0 OM$
fHO TI$0MIOO
$ IIfIA%$ $ ITI4$
fACILITYIIAM0 III OOCIIKT IIVM0$II IT I LTII IIVM0$II I ~ I fAO$ ITI R.E. Ginna Nuclear TSCT IJf esse ONCe e Neoooe.
~
see Oeeeesol JVIIC fons Plant
~'el I ITI o s o o o 24 490 oeQVTnTIAL 01 SUM 7
sovlssln S
0 M ~S 1 02 orl 5 PRE-EVR2lT PLANT CONDITIONS The plant was in the process of starting up subsequent'to the plant trip of 12/ll/90 (discussed in LER 90-013). The reactor was at approximately 34 full power, awaiting clearance that secondary chemistry parameters were within specification.
The two Control Room reactor operators were providing full time attention to maintaining steam generator water level (i.e. using "manual" control of feedwater addition) and controlling reactivity due to a Xenon transient (i.e. with manual control of boron concentration). At approximately 2044 EST, December 12, 1990, the Control Room received Main Control Board Alarm L-14 (Bus 14 Under Voltage Safeguards). Due to this undervoltage failure, the "A" Emergency Diesel Generator automatically started. By design, it did not close into Bus 14 as Bus 14 was still powered by its normal supply. The Control Room operators dispatched auxiliary operators (AO) to check the Bus 14 Undervoltage Monitoring System Cabinets in the Auxiliary Building and Relay Room. One of the AO's reported to the Control Room operators that the Bus 14 Undervoltage Monitoring System Cabinet in the Auxiliary Building had a burnt odor and the relay indicating lights indicated that at least one relay was not operable. This event is discussed in LER 90-015.
The Operations Shift Supervisor .(SS) notified station electricians of the above indications. The station electricians then checked the Bus 14 Undervoltage Monitoring System Cabinets and found a faulty solid state switch printed circuit board in the Auxiliary Building Bus 14 Undervoltage Monitoring System Cabinet. These findings were reported to the Control Room.
vsC f OAQ $ 00A teal
~ <<AC SccNc SSSA V.S. NVCLSAII ASOULATOIIYCOMMISSION
$ 4SI LICENSEE EVENT REPORT (LER) TEXT CONTINUATION Aft<<OVSO OMS NO SISOMIOC S)tPIIISS 4ISI/IS SACILITY HAM% III OOClcKT HVMISA ITI LSII NVMSSII ISI AAOS ISI NSAII SCOVCNTIAL ASV<<ION Nvcc TN ~ Nvr Cr R.E. Ginna Nuclear Power Plant o s o o o 2 4 4 90 01 7 0 1 03 pal 5 TKXT IllcNrr <<Wce r ctowecI. uM CcNH<<crl ITIC %%d ~'CI IITI The Station Electrical Planner then initiated, "Work Request or Trouble Report" Number 9024136, reviewed applicable drawings and prepared a work package (i.e. work order number 9024136) which included PORC approved Main-tenance procedure M-48.14 (Xsolation of Bus 14 Undervoltage System for Maintenance, Troubleshooting, Rework and Testing). The work package was then reviewed by the Planner Scheduler for compliances with administrative requirements. The Electrical Planner then performed required notifications of the QC Engineer and a Results and Test technician, and briefed them on the contents of the work package. The Electrical Planner took the work package to the Electric Shop and reviewed electricians who were to perform the work.
it with the two The Electrical Planner and two electricians went to the Control Room and reviewed the M-48.14 .procedure with the SS. The SS performed a review of the M-48.14 procedure to approve the steps for transferring electrical loads on Bus 14 to the "A" Emergency Diesel Generator. The SS then gave the M-48.14 procedure to the Control Room Foreman (CRF) to actually perform the operational steps. When the CRF began to read step 5.5.1 of M-48 14, he stopped and questioned the Electrical Planner concerning this step.
Step 5.5.1 required the opening of two DC switches. The CRF was concerned with the effect of opening these two DC switches, given the current plant conditions. Therefore, the CRF and Electrical Planner reviewed the Xnitial Conditions of M-48.14, and re-verified that they were adhering to the procedure requirements. The Electrical Planner stated to the CRF that this procedure had been performed before.
NAC AOAM SSSA I04) I
MAC term 444A U.4. IIUCL4*II14OULATOAY COMMI44IOH (044 I LICENSEE EVENT REPORT {LER) TEXT CONTINUATION AttAOYEO OM4 HO 4I50&104 4IItIII4$ 4I414$
tACILITYIIAM4 III OOCK4T IIUM44A LTI L4II IIUM44II I4I tAO4 I4I rvrr T I1AI.
$ 4 OV4 14VISIOr M ~ 1 R.E. Ginna Nuclear Power Plant o 5 o o o 24 490 01 7 0 10 40Fl 5 TEXT IJIrrtt rrce r rrvteA t>> trrr4trt NIIC Atnr ~'tI l Ill DESCRIPTION OF EVENT A. DATES AND APPROXIMATE TIMES OF MAZOR OCCURRENCES:
o December 12, 1990, 2310 ST: Event Date and Time (i.e. SI DC switches opened) o December 12, 1990, 2330 EST: SI DC switches closed o December 13, 1990, 0102 EST: Event Discovery Date and Time o December 13, 1990, 0150 EST: Nuclear Regulatory Commission (NRC) notified via Emergency Notification System (ENS)
B. FAST On December 12, 1990 at 2310 EST, with the reactor at approximately 34 full power, the CRF opened the. two DC switches (required by step 5.5.1 of M-48.14) in the 'DC distribution panels on the back of the Control Board. The opening of these switches caused Control Board Alarm L-31 (Safeguards DC Failure) to annunciate.
The receipt of this alarm was questioned at the, time, but the response from the CRF was that the alarm was an expected result of performing step 5.5.1 of M-48.14. Further evaluation of this alarm was deferred to continue with M-48.14.
The CRF, continuing with M-48.14, opened the Bus 14 Normal Feed Breaker to allow the "A" Emergency Diesel Generator to tie into Bus 14. This action resulted in momentarily de-energizing the 1B Instrument Bus.
The reactor trip relay from Nuclear Instrumentation System Intermediate Range Channel N-36 (powered from this Bus) de-energized and a reactor trip occurred.
The reactor trip is discussed in LER 90-016.
MAC tOAM 444A i444I
MAC Terna $ 44A V.S. IIVCLSAA 1SOULATOAY COMMISSIOM ISA I /
LICENSEE EVENT REPORT (LER) TEXT CONTINUATION A99AOVSO OMS MO SISOWIOl SIItllISS SISI4$
/ACILITYIIAM4 III OOCIIST MVMSSII I!I LSII MVMSSII ISI TaovlrnAL aSYOIQ>
1 HUM A ~y M R.E. Ginna Nuclear Power Plant o s o o o 24 490 0,5 QF1 5 TscT w rrr9 race r rrrrA vie eeeeew sAC err ~SI IITI The Control Room operators immediately performed the applicable actions of E-0 (Reactor Trip or Safety Injection) and ES-0.1 (Reactor Trip Response) and stabilized the plant in hot shutdown.
After completing the applicable steps of E-0 and ES-0.1, the Control Room operators completed their part of M-48.14, by closing the two DC switches that had been opened in step 5.5.1 of M-48.14. This was accomplished at approximately 2330 EST, December 12, 1990.
The oncoming SS, who had been in the Control Room during this event, resumed the evaluation of the consequences of alarm L-31 after plant conditions had stabilized. (The cause of the alarm had already been determined.) He performed another review of M-48.14 and called other knowledgeable members of the plant staff at their homes (at approximately 0100 EST, December 13, 1990) to discuss his concerns about the effect of opening these two DC switches. After receiving confirmation that his concerns were legiti-mate, he made the proper notifications to higher supervision and the Nuclear Regulatory Commission (NRC) .
C. INOPERABLE STRUCTURES 4 COMPONENTS 4 OR SYSTEMS THAT CONTRIBUTED TO THE LRG%T:
None.
D. OEM SYSTEMS OR SECONDARY FUNCTIONS AFFECTED:
None.
E. METHOD 'OF DIScommY:
The event was made apparent during the oncoming SS review of the consequences of Control Board Alarm L-31 (Safeguards DC Failure) and subsequent discussions with knowledgeable plant staff.
MAC SOAM $ 44A
>94$ I
0 MAC torw aaaA V.S. IIVCLSAII ASOVLATOIIYCOMMISSIOH IS4al LICENSEE EVENT REPORT (LER) TEXT CONTINUATION AffAOVSO OMS HO SISO&104 arflASS SISI4S fACILITYNAMa III oocraT IlvMaar Ial I,all IIVMaall Ial ~ AOa Ial SCOVCHTIAL Ra+IQIOH
%VM A M SA TaxT IIIneve MMfe e ~
R.E. Ginna Nuclear Power Plant
~ oeaecver A'c fons Ia'llII' 5 o o o 24 490 01 7 0 106 ovl 5 P OPERATOR ACTION:
Factors that influenced operator actions during the event were as follows:
0 The Control Room operators questioned step 5.5.1 in procedure M-48.14, but information in M-48. 14, the DC switch labels, and Alarm Response procedure AR-L-31 did not provide sufficient operational information to determine the consequences of opening these two switches.
o The Control Room operators had confidence in a Plant Operating Review Committee (PORC) approved procedure that had also been reviewed by the Electrical Planner.
As the event was over prior to discovery, no operator actions other than normal were performed.
G. SAFETY SYSTEM RESPONSES:
None.
XXX CAUSE OP EMBFZ A. IMl69)IATE CAUSE:
A condition outside the design basis of the plant was caused by the disabling of manual (pushbutton) and automatic actuation of the safeguards sequence initiation (i.e. auto and manual SZ).
INTERMEDIATE CAUSE:
The disabling of manual (pushbutton) and automatic actuation of the safeguards sequence initiation was caused by switch f12 in the lA DC Distribution Panel and switch g9 in the 1B DC Distribution Panel being open at the same time. Both of these panels are on the back of the Main Control Board.
41C SOAQ SSSA la0SI
MAC Sons 494A V.S. IIUCLSAII IIEOULATOAYCOMMISSION I94SI LICENSEE EVENT REPORT (LER) TEXT CONTINUATION A99ROVEO OM4 RO SISOMIOA EX9IRES 41414$
9ACILITY IIAME III LEII HVMCEA 191 SSQUSNTIAL ASYOIO>
H M A A R.E. Ginna Nuclear Power Plant o o o o 24 490 p 7 OFl 5 TEXT lll~ CWCe M neee4 YA9 aANenel CIVIC Ann ~ El I ITI 5
Procedure M-48.14 had been initially written in 1983 for use at hot or cold shutdown conditions. In 1985, the procedure was modified to allow use only at cold shutdown conditions. The initial procedure and the revisions were technically correct and received a multi-disciplined review and approval. During 1988, M-48.14 received a major rewrite and Revision 6 became effective March 23, 1989. The purpose of the rewrite was to change the method of feeding Bus 14, and as part of this process the plant mode was changed to "Any Mode of operation." This change received a thorough review prior to becoming effective.
One day later, it was erroneously concluded that certain steps, which had previously been in the procedure for use at cold shutdown, were inadvertently omitted from the current procedure. Thus, M-48.14 was changed to insert the current step 5.1.1. This change is inappropriate in modes other than cold shutdown, but this was not recognized during the review and approval process.
ROOT CAUSE:
The root cause was determined to be failure of the organization to attribute sufficient attention to detail in the procedure change process.
0 A Maintenance procedure which was previously correct, was changed to require inappropriate actions, in that the procedure directed the opening of switches in the DC power supply to the SI sequences during all modes of operation.
0 The procedure was reviewed by the Plant Operating Review Committee and approved for use by plant management, for all modes of plant operation, although the opening of the two DC switches was clearly intended for use at cold shutdown conditions to prevent spurious SI actuation during Bus transfer to the Emergency Diesel Generators.
+AC AOAM 444A i9 441
NNC Sere
($ 4SI M V.S. NVCLSAN ACOULATOIIYCOMMISSION
/
L'ICENSEE EVENT REPORT ILERI TEXT CONTINUATION ASSAOYKO OMS NO S1$ 0&IOS
$ NSIII%$ SISI4$
FACILITY NANt III OOCISKT NUMCSII ISI Llll NVMOSII III ~ AOS IS)
SSQUSNTIAI, ASYISION M 1 M ~A R.E. Ginna Nuclear Power Plant o s o o o 24 490 01 7 0 80F1 5 TEXT IN'mao MSCe N nerre4 ~ ~HIICANM~'Sl I Ill A contributing factor is the need for a question-ing attitude. The CRF, in questioning the performance of step 5.1.1 of M-48.14, did not go far enough with his questioning attitude.
XV. ANALYSTS OF EVENT This event is reportable in accordance with 10 CFR 50.73, Licensee Event Report System, item (a)(2)(ii)(B), which requires a report of "any event or condition that resulted in the condition of the nuclear power plant, including its principal safety barriers, being seriously degraded, or resulted in the nuclear power plant being in a condition that was outside the design basis of the plant", in that the disabling of manual (pushbutton) and automatic actuation of the safeguards sequence initiation placed the plant in a condition outside its design basis.
An assessment was performed considering both the safety consequences and implications of this event with the following results and conclusions:
During the above event, manual (pushbutton) and automatic actuation of the safeguards sequence initiation was disabled, however, the various pumps and valves were operable and could be operated by the Control The Control Room operators perform immediate Board'witches.
actions upon reactor trip per procedure E-0. Through these procedural immediate actions the operators evaluate whether a condition requiring safety injection exists, and if required, verify operation of safeguards equipment or manually start and align that equipment. Their evaluation would be based upon the appropriate annunciator alarms (all of which were unaffected by the DC switch positions),
or a review of control board parameter indications (i.e.
RCS pressure, Steam Generator pressure, etc.).
NAC SON M SSSA
< ~ AS I
ISWC iona 00SA V.S. IIuCLSASI ASOVLATOIIYCOMMISNOII I043 I LICENSEE EVENT REPORT ILERI TEXT CONTINUATION /
ASSAOYlO OM0 HO 0ISOWIOS
%)ttlAll SI314S FACILITY IIAMlIII OOCIIKT IIUMllAIll Llll MOMOSII I ~ I R.E. Ginna Nuclear TEXT IF WaO CWOt A teyWet, ~
~
ASASOASI IYJIC Anti Plant
~'S I IITI o s o o o 24 490 SSQMSNTIAL ' 'SVOIO>
01 M A 7 0 M S1 10 90sl 5 The effect of the potential delay in actuating safeguards equipment upon those events analyzed in the UFSAR was evaluated. The accidents effected by this action are those accidents which result in depressurization of the primary system causing SI. These are primarily the following:
o Feed Line Break (FLB) o Steam Generator Tube Rupture (SGTR) o Small Break Loss of Coolant Accident (SBLOCA) o Large Break Loss of Coolant Accident (LOCA) o Small Steam Line Break (Small SLB) o Large Steam Line Break (SLB)
An analysis of these accidents was performed to determine the effect of the disabling of manual (pushbutton) and automatic actuation of the safeguards sequence initiation with the following results:
Feed Line Break This accident was analyzed by the Ginna Updated Final Safety Analysis Report (UFSAR) as' heat up event with auxiliary feedwater available in ten (10) minutes. As a heatup event, RCS pressure never decreased below the SI setpoint, but rapidly increased above the SI pump shutoff head. Therefore, SI was not necessary and auxiliary feedwater, when available within ten (10) minutes, is sufficient to mitigate the event. Operator actions to start auxiliary feedwater within ten (10) minutes is consistent with the Ginna licensing basis. If the FLB was re-evaluated as a cooldown event from 34 power the results would be bounded by a SLB.
VAC +0AM SSSA
<l00 I
MAC 4re SSSA V.S. IIUCLEAIIASOULATOIIYCOMMISNOIe ITS I LICENSEE EVENT REPORT ILERI TEXT CONTINUATION /
ASSAOVKO OM9 kO 9I SONICS SIISIA9$ SISI4$
SACILITY IIASSS Ill OOCIICT IIUMSKR Ill LSII MUM99ll ISI ~ AOS ISI SSQVSNTIAL A 9 VISION SVM A M SA TaXT IIT~MMCS e ~
R.E. Ginna Nuclear Power Plant ee SSA9SAM AIAC rene ma SI IITI o s o o o 2 4 4 90 01 7 0 1 100F1 5 Steam Generator Tube Ru ture SGTR is bounded by SBLOCA from the RCS depressurization standpoint. The leak rate from a SGTR is, small compared to break flow for a SBLOCA. There is no significant effect due to lack of manual (pushbutton) or automatic SI since the main steps in the procedure deal with isolation of the ruptured SG, depressurization of the RCS, and termination of SI.
Small Break Loss of Coolant Accident When manual (pushbutton) and automatic SI was de-activated, the reactor was operating at 34 power. The reactor had been at 34 power for approximately ten (10) hours. Prior to that, the reactor had been subcritical for twenty-two (22) hours following a trip.
Westinghouse Owner's Group letter WOG 90-113, dated July 2, 1990, "Shutdown LOCA Program Draft Report", evaluated a mode 4 LOCA using a generic two (2) loop plant with a six (6) inch break assumed to occur two and a half (2.5) hours after shutdown. Acceptable results were obtained provided SI was started ten (10) minutes after the break.
Assumptions of the mode 4 LOCA analysis 'are compared with the Ginna Event conditions below:
WOG MODE 4 GINNA EVENT Decay Heat 1.34 Decay Heat 0.534 No accumulators available Accumulators available RCS pressure 1000 psig RCS pressure 2235 psig RCS temperature 425oF RCS temperature 547 F The availability of accumulators and the lower decay heat offset the higher RCS temperature and pressure. Sufficient time is available to manually start the SI and RHR pumps and open appropriate valves from the Control Room, and to recover from the SBLOCA. In any case, SBLOCA is bounded by LOCA because less time is available for operator action during a Large Break LOCA. No credit was taken for charging flow which by itself could have removed approximately that level of decay~heat.
VAC SCAM SSSA i9 All
NNC for>> SSSA U.S. NUCLlAN 1SOULATOIIY COMMISSION (S4S I
ICENSEE EVENT REPORT ILERI TEXT CONTINUATION /
Aff1OVSO OMS NO SISO&I04 tllfl1SS 'SISI4S fACILITYNAMS III OOCKST NUMSSII 11I Lt1 NUMSSN ISI ~ AOS QI SSQUSNTIAL ASVISION NUM 1 I N M ~A R.E. Ginna Nuclear Power Plant o s o o o 2 4 4 90 Ol 7 0 111 OF1 5 TSICT IN' a>>Ce>>>>SVfff. vlf OS>>SOAN lVAC fWse ~VII ITI Lar e Break Loss of Coolant Accident An assessment of disabling manual (pushbutton) and automatic SI at 34 power was performed by Westinghouse with respect to the LOCA analysis. The assessment assumed the RCS was at 547 F, 2235 psig. The fuel rods were assumed to be at 600 F which would be the approximate pellet and clad temperature at the end-of-blowdown phase. The vessel lower plenum and the lower portion of the core would be covered with accumulator water.
that, SI must be initiated when the fuel rods are at 1800 F Further, it was assumed to turn around the cladding temperature before it reaches 2200 F. Decay heat is based on an approximation of power history prior to the event, using the 1971 ANS Model. An adiabatic heatup calculation was performed using properties for a 14 x 14 array Optimum Fuel Assembly (OFA). The calculation indicated SI was necessary in approximately 14 minutes. Simulations on the Ginna specific simulator indicate a less than 2 minute operator response during a LOCA is achievable.
Small Steam Line Break This accident is bounded by the Large SLB because longer times are available for operator response.
Lar e Steam Line Break Westinghouse assessed the effect of no manual (pushbutton) or automatic SI on the Steam Line Break analysis. Based on their experiences with Steam Line Break analysis as well as a review of the available margin to the acceptance criteria, it was judged that analyzed at 34 power with no manual (pushbutton) or if the accident were re-automatic SI, acceptable results would be obtained.
41C fOAQ SSSA iSASI
MAC Sons $ $ $ A V.$. HUCL$ AII ATOULATOIIYCOMMI$$ IOM 1$ 4$ 1 LICENSEE EVENT REPORT II.ERI TEXT CONTINUATION ASSAOVKO OUI IIO $ I$ 0MIOO
$ )IOIA$$ l/$ 1/8$
SACILITY IIAM$ 111 OOCII $ T IIUSM$% 11I Ltll IIVMO$ 11 1$ l SAO$ 1$ 1
$ $ CUonTIAL sovlslon
~ IVM S ' M ~S RoE. Ginna Nuclear Power Plant o s o o o 2 4 4 90 01 7 0 1 12 0~1 5 TSIT III'ssoo MMo ~ nooooY. oM ooMMMMAtAC ASM ~$ I ITI I
Rochester Gas and Electric Corporation (RG&E) performed a computer analysis of the SLB using the Westinghouse LOFTRAN Code. A base case was compared to a case where SI was delayed for ten (10) minutes. The comparison indicated negligible change in minimum DNBR. There was an insigni-ficant change in mass released to containment because mass release is dominated by initial steam generator level and auxiliary feedwater flow, neither of which are affected by delayed SI. Comparing energy out the break for both cases, showed negligible differences. Therefore, delaying SI has negligible effect on minimum DNBR and mass/energy out the break.
In conclusion, delay of manual (pushbutton) and automatic SI with the reactor at 34 power would not cause Non-LOCA events to exceed the acceptance criteria. A delay of approximately 14'inutes in the LOCA can be tolerated without unacceptable results. Based on operator training, this is sufficient time for operator response.
Based on the above, it can be concluded that the public's health and safety was assured at all times.
V. CORRECTIVE ACTION ACTION TAKEN TO RE'ZURN AFFECTED SYSTEMS TO PRE-~9FZ NORMAL STATUS:
The affected system was restored to normal when the two (2) DC switches were closed twenty (20) minutes after they were opened.
VAC SCAM $$$ A
<0'
IIAC >ww SSSA V.S. IIUCLSAII IISOULATOIIYCOMMISSIOII LICENSEE EVENT REPORT ILER) TEXT CONTINUATION /
ASSAOYSO OMS IIO )ISO&I04 SXrlASS SISIISS SACILITY IIAMS III OOCIIST IIVMSSII ISI LSII IIUMS~ II ISI ~ AOS ISI SLOMINTIAL lllVISIQN
~I 4 1 4 4 R.E. Ginna Nuclear Power Plant o s o o o 24 490 01 7 0 113 OF1 5 B. ACT?ON TAKEN OR PLANNED TO PREVENT RECURRENCE:
Short Term Actions 0 Senior Management met with key plant personnel to communicate management expecta-tions for a questioning attitude and attention to detail. These groups included all the operating shifts, the Maintenance planning staff, and PORC members.
0 Policies were issued addressing the Opera-tions Shift Supervisor review of procedures prior to giving authorization to proceed, and the Maintenance planners'esponsi-bilities for Work Package review.
0 All plant procedures were screened for possible operational impact inadequacies, and potentially deficient procedures were made unavailable for use. Procedures that were made unavailable for use, but were immediately required for safe plant operation, were carefully reviewed prior to being made available for use.
f A Human Per ormance Enhancement System (HPES) evaluation was performed on Control Room activities 'associated with this event, to identify the need for any additional short term corrective actions. Additional actions were identified. Actions identified by the HPES process were implemented where appropriate, including additional upgrades of switch labels, a more detailed review of Alarm Response procedures, improved wording of pro'cedural steps for Human Factors concerns, and additional information to be made available to the operators.
For all involved operations personnel, their operating experience and training histories were reviewed for adequacy.
SAC AOAM SSSA (0 AS I
NAC ro<<M EEEA VS. NVCLEAII AEOVLATOIIYCOMMIEEION I04) I UCENSEE EVENT REPORT ILER) TEXT CONTINUATION ArrROV EO OME NO 3150&104 E)IrIAEE EI31/8$
rACILITYNAME Ill DOCKET NVMEEA IEI LEII NVMEEII (EI ~ ACE IEI
<<EAA SECVENTIAL AEVISIQN N M EA
\
R.E. Ginna Nuclear Power Plant o s o o o 24 490 01 7 0 1 4 OF 1 TExT Ih'rrrr NMrr <<Mrr<<EE. <<rE aaseow NOMIC fond ~'rI IITI 0 An independent assessment of the status of short term actions, and of the procedure screening, was conducted before management authorized restart of the reactor.
2 ~ Long Term Actions 0 An HPES evaluation of the procedure change process is being performed. From this evaluation, recommendations for long term improvements will be implemented. Among these improvements are the increased involvement of Operations in the review of proposed changes, requirements for more accurate descriptions of proposed changes, and more rigor in the review of changes at PORC meetings.
0 To ensure the effectiveness of the short term corrective actions, follow-up evalua-tions will be conducted. Based on these evaluations, management will determine the need for additional reinforcement of these actions.
0 The training programs for Operations personnel, PORC members, and Maintenance planners will be re-evaluated. We expect to make long term improvements in these programs, and in the content of these programs, and -also in the training programs for other plant personnel.
0 Procedures that are currently unavailable for use will be reviewed in detail prior to release for use. We are expediting the review of those procedures, placing highest priority on those procedures which are expected to be needed during the course of routine operations, to ensure their avail-ability in the near future.
NAC rOAM EEEA
>EATI
0 l
IIAC tore SSSA V.S. IIUCLEAA AEOULATOIIYCOMMITSIOII IS43 I L'ICENSEE EVENT REPORT (LER) TEXT CONTINUATlON r ANNAOVEO OMS HO )ISO&ION EXNIAES >II5145 NACILITYIIAME III OOCKKT IIUMItllI1I Ill LEII IIUMOEX IN ~ AOE SNOUNHTIAL i NSVOION 4VM 8 H M Ni R.E. Ginna Nuclear Power Plant o s o o o 2 4 4 90 01 7 0 1 50rl 5 TEXT IN' 4eCe e teerrC ~ NcMOoeV IVJIC Awe ~1 I ITI I
0 Policies that were initiated as a result of this event will be reviewed for consistency with pre-existing policies and procedures.
where appropriate, existing policies will be altered, superseding the new policies.
ADDXTXONAL XNFORMATXON A. FAILED COMPONENTS:
None.
B. PREVIOUS LERs ON SIMILAR EVENTS:
A similar LER event historical search was conducted with the following results: No documentation of similar LER events with the same root cause at Ginna Station could be identified.
C. SPECXAL COMMENTS None.
VAC NOAM SSSA iSOJI
0 I