ML17335A553: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
 
(Created page by program invented by StriderTol)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:NRCFORM366U.S.NUCLEARREGULATCOMMISSIONie-1999)LICENSEEEVENTREPORT(LER)(Seereverseforrequirednumberofdigits/characters,foreachblock)APPROVMBNO.3150-0104EXPIRES06/30/2001Estimatedburdenperresponsetocomplywiththismandatoryinformationcogectionrequest:50hrs.Reportedlessonslearnedareincorporatedintothelicensingprocessandfedbacktoindustry.ForwardcommentsregardingburdenestimatetotheRecordsManagementBranch(T4F33),U.S.NuclearRegutatoryCommission.Washington,DC205554&1,andtothePapenNorkReductionProject(3t504104),OiriceofManagementandBudget.Washington.DC20503.lfaninformationcollectiondoesnotdisplayacurrentlyvalrdOMBcontrolnumber.theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto.theinformationcollection.FACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBERI2)05000-315PAGEI3)1OF4TITLEt4)InadequateTechnicalSpecificationSurveillanceTestingofEssentialServiceWaterPumpEngineeredSafetyFeatureResponseTimeEVENTDATE{5)LERNUMBER{6)REPORTDATE(7)OTHERFACILITIESINVOLVED(8)MONTHDAYYEARYEAR1999SEQUENTIALREVISIONNUMBERNUMBERMONTHDAYYEARFACILITYNAMEFACIUIYNAMEDOCKETNUMBERDOCKETNUMBEROPERATINGMODE(9)POWERLEVEL(10)20.2201(b)20.2203(a)(1)20.2203(a)(2)(i)20.2203(a)(2)(v)20.2203(a)(3)(I)20.2203(a)(3)(ii)50.73(a)(2)(i)50.73(a)(2)(ii)50.73(a)(2)(iii)DPURSUANTTOTHEREQUIREMENTSOF10CFR5:(CheckTHISREPORTISSUBMITTEoneormoro){11)50.73(a)(2){viii)50.73(a)(2)(x)73.7120.2203(a)(2)(ii)20.2203(a)(2)(iii)20.2203(a){2)(iv)20.2203(a)(4)50.36(c){1)50.36(c)(2)LICENSEECONTACTFORTHISLER{12)50.73(a)(2)(iv)50.73(a)(2)(v)50.73(a)(2)(vii)OTHERSpecifyinAbstractbeloworInNRCForm366ANAMEMaryBethDepuydt,RegulatoryComplianceTELEPHONENUMBERIInrSudeAreaCode)(616)465-5901X1589COMPLETEONELINEFOREACHCOMPONENTFAILUREDESCRIBEDINTHISREPORT(13)cAUSESYSTEMCOMPONENTMANUFACTURERREPORTABLEToEPIXCAUSESYSTEMCOMPONENTMANUFACTURERREPORTABLEToEPIXSUPPLEMENTALREPORTEXPECTED14YEs{Ifyes,completeEXPECTEDSUBMISSIONDATE).NOEXPECTEDMONTHDAYYEARABSTRACT(Limitto1400spaces,i.o.,approximately15single-spacedtypewrittenlinos)(16)OnJune24,1999,duringareviewofthefindingsofExpandedSystemReadinessReview(ESRR)teambyPerformanceAssurance(PA),itwasdiscoveredthatnotestingprogramcouldbeidentifiedwhichverifiesthecapabilityoftheEssentialServiceWater(ESW)pumpstomeettheEngineeredSafetyFeature(ESF)responsetimespeciTiedintheTechnicalSpecifications(TS)ortheUpdatedSafetyAnalysisReport.Subsequentinvestigationconfirmedthatin-placeTSsurveillancetestingmeasuredtheESFresponsetimefortheESWpumpsastheelapsedtimefromactuationofthechannelsensoruntilpumpbreakerclosure,butdidnotincludethetimeuntilaspecifiedpumpdischargepressureisreachedoruntiltheESWpumpdischargevalveisopen;asrequiredbythedefinitionofEngineeredSafetyFeatureResponseTime.SinceexistingsurveillancetestingdidnotsatisfytheTSdefinitionofESFresponsetime,theidentifiedconditionconstitutesamissedsurveillancetest.ThisisanoperationorconditionprohibitedbyTSandwasdeterminedtobereportablepursuanttotherequirementsof10CFR50.73(a)(2)(i)(B)onSeptember7,1999.Theapparentcauseofthiseventwastheinadequateunderstandingoftheplantdesignbasis.Surveillancetestswillberevisedandimplementedtoincludethetimetoachieveprescribedpumpdischargepressure/flowand/ordischargevalvepositionaspartoftheoverallESFresponsetimetestingfortheESWsystempriortorestartofeachrespectiveunit.TheESWESFresponsetimesinUFSARTable7.2-7willbeevaluatedandrevised,ifnecessary,priortorestartofeachrespectiveunit.ESWsystemperformancerecordsandsurveillancetestresultsprovidereasonableassurancethatthesystemhasremainedcapableofperformingitsinterldedfunctions.Therefore,therewereminimalsafetyimplicationstothehealthandsafetyofthepublicasaresultofthisevent.'I)9i0i30i9499i007PDRADGCI{l050003i5SPDR  
{{#Wiki_filter:NRCFORM366U.S.NUCLEARREGULATCOMMISSION ie-1999)LICENSEEEVENTREPORT(LER)(Seereverseforrequirednumberofdigits/characters, foreachblock)APPROVMBNO.3150-0104 EXPIRES06/30/2001 Estimated burdenperresponsetocomplywiththismandatory information cogection request:50hrs.Reportedlessonslearnedareincorporated intothelicensing processandfedbacktoindustry.
Forwardcommentsregarding burdenestimatetotheRecordsManagement Branch(T4F33),U.S.NuclearRegutatory Commission.
Washington, DC205554&1, andtothePapenNork Reduction Project(3t504104),
OiriceofManagement andBudget.Washington.
DC20503.lfaninformation collection doesnotdisplayacurrently valrdOMBcontrolnumber.theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto.theinformation collection.
FACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBERI2)05000-315 PAGEI3)1OF4TITLEt4)Inadequate Technical Specification Surveillance TestingofEssential ServiceWaterPumpEngineered SafetyFeatureResponseTimeEVENTDATE{5)LERNUMBER{6)REPORTDATE(7)OTHERFACILITIES INVOLVED(8)MONTHDAYYEARYEAR1999SEQUENTIAL REVISIONNUMBERNUMBERMONTHDAYYEARFACILITYNAMEFACIUIYNAMEDOCKETNUMBERDOCKETNUMBEROPERATING MODE(9)POWERLEVEL(10)20.2201(b)20.2203(a)
(1)20.2203(a)(2)
(i)20.2203(a)
(2)(v)20.2203(a)(3)(I) 20.2203(a)(3)(ii) 50.73(a)(2)(i) 50.73(a)(2)(ii) 50.73(a)(2)(iii)
DPURSUANTTOTHEREQUIREMENTS OF10CFR5:(CheckTHISREPORTISSUBMITTEoneormoro){11)50.73(a)(2){viii)50.73(a)(2)(x)73.7120.2203(a)(2)(ii) 20.2203(a)(2)(iii) 20.2203(a)
{2)(iv)20.2203(a)
(4)50.36(c){1)50.36(c)(2)
LICENSEECONTACTFORTHISLER{12)50.73(a)(2)(iv) 50.73(a)(2)
(v)50.73(a)(2)(vii)OTHERSpecifyinAbstractbeloworInNRCForm366ANAMEMaryBethDepuydt,Regulatory Compliance TELEPHONE NUMBERIInrSudeAreaCode)(616)465-5901X1589COMPLETEONELINEFOREACHCOMPONENT FAILUREDESCRIBED INTHISREPORT(13)cAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE ToEPIXCAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE ToEPIXSUPPLEMENTAL REPORTEXPECTED14YEs{Ifyes,completeEXPECTEDSUBMISSION DATE).NOEXPECTEDMONTHDAYYEARABSTRACT(Limitto1400spaces,i.o.,approximately 15single-spaced typewritten linos)(16)OnJune24,1999,duringareviewofthefindingsofExpandedSystemReadiness Review(ESRR)teambyPerformance Assurance (PA),itwasdiscovered thatnotestingprogramcouldbeidentified whichverifiesthecapability oftheEssential ServiceWater(ESW)pumpstomeettheEngineered SafetyFeature(ESF)responsetimespeciTied intheTechnical Specifications (TS)ortheUpdatedSafetyAnalysisReport.Subsequent investigation confirmed thatin-placeTSsurveillance testingmeasuredtheESFresponsetimefortheESWpumpsastheelapsedtimefromactuation ofthechannelsensoruntilpumpbreakerclosure,butdidnotincludethetimeuntilaspecified pumpdischarge pressureisreachedoruntiltheESWpumpdischarge valveisopen;asrequiredbythedefinition ofEngineered SafetyFeatureResponseTime.Sinceexistingsurveillance testingdidnotsatisfytheTSdefinition ofESFresponsetime,theidentified condition constitutes amissedsurveillance test.Thisisanoperation orcondition prohibited byTSandwasdetermined tobereportable pursuanttotherequirements of10CFR50.73(a)(2)(i)(B) onSeptember 7,1999.Theapparentcauseofthiseventwastheinadequate understanding oftheplantdesignbasis.Surveillance testswillberevisedandimplemented toincludethetimetoachieveprescribed pumpdischarge pressure/flow and/ordischarge valvepositionaspartoftheoverallESFresponsetimetestingfortheESWsystempriortorestartofeachrespective unit.TheESWESFresponsetimesinUFSARTable7.2-7willbeevaluated andrevised,ifnecessary, priortorestartofeachrespective unit.ESWsystemperformance recordsandsurveillance testresultsprovidereasonable assurance thatthesystemhasremainedcapableofperforming itsinterlded functions.
Therefore, therewereminimalsafetyimplications tothehealthandsafetyofthepublicasaresultofthisevent.'I)9i0i30i94 99i007PDRADGCI{l050003i5SPDR  


NRCFORM366AU.S.NUCLEARRETORYCOMMISSIONl+,16.1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATIONFACILITYNAMEI1)DocKETI2)LERNUMBER(6)PAGEI3)CookNuclearPlantUnit105000-315"EAR1999SEQUENTIALNUMBER023REVISION2QF4NUMBER00TEXTllfmorespaceisrequired,useadditionalcopiesofNRCForm366AJ)17)CONDITIONSPRIORTOEVENTUnit1wasdefueledUnit2wasdefueledDESCRIPTIONOFTHEEVENTOnJune24,1999,duringareviewofthefindingsofExpandedSystemReadinessReview(ESRR)teambyPerformanceAssurance(PA),itwasdocumentedthatnotestingprogramcouldbeidentifiedwhichverifiesthecapabilityoftheEssentialServiceWater(ESW)pumpstomeettheEngineeredSafetyFeature(ESF)responsetimespecifiedintheTechnicalSpecificationsortheUpdatedSafetyAnalysisReport.SubsequentinvestigationofthisconditionbyEngineering,completedSeptember1,1999,confirmedthattheacceptancecriteriaforin-placeTechnicalSpecificationsurveillancetestingdefinedtheESFresponsetimefortheESWpumpsastheelapsedtimefromactuationofthechannelsensoruntilpumpbreakerclosure.TestingdidnotincludethetimeuntilaspecifiedpumpdischargepressureisreachedortheESWpumpdischargevalveisopen,asrequiredbythedefinitionofEngineeredSafetyFeatureResponseTime.TheTechnicalSpecification(TS)andUFSARdefinitionofEngineeredSafetyFeatureResponseTime.isthattimeintervalfromwhenthemonitoredparameterexceedsitsESFactuationsetpointatthechannelsensortountiltheESFequipmentiscapableofperformingitssafetyfunction(i.e.,thevalvestraveltotheirrequiredpositions,pumpdischargepressuresreachtheirrequiredvalues,etc.).SinceexistingsurveillancetestingdidnotsatisfytheTSdefinitionofESFresponsetime,theidentifiedconditionconstitutesamissedsurveillancetest.CAUSEOFTHEEVENTTheapparentcauseofthiseventwasinadequateunderstandingofthedesignbasisoftheplant.DuringthedevelopmentoftheESWESFresponsetimes,thedesignbasisrequirementsforESWavailabilityduringanaccidentwereinadequatelyunderstood.ThisresultedinsurveillanceproceduresforESWwhichdidnotsatisfytheUFSARandTechnicalSpecificationdefinitionofESFresponsetime.ANALYSISOFTHEEVENTTheTechnicalSpecification(TS)andUFSARdefinitionofEngineered'SafetyFeatureResponseTimeisthattimeintervalfromwhenthemonitoredparameterexceedsitsESFactuationsetpointatthechannelsensortountiltheESFequipmentiscapableofperformingitssafetyfunction(i.e.,thevalvestraveltotheirrequiredpositions,pumpdischargepressuresreachtheirrequiredvalues,etc.).SinceexistingsurveillancetestingdidnotsatisfytheTSdefinitionofESFresponsetime,theidentifiedconditionconstitutesamissedsurveillancetest.ThisisanoperationorconditionprohibitedbyTSandwasdeterminedtobereportablepursuanttotherequirementsof10CFR50.73(a)(2)(i)(B)onSeptember7,1999.ResponsetimesforEngineeredSafetyFeaturesareprovidedintheUFSAR,Section7.2,Table7.2-7.TheESFResponseTimeBasisProcedurespecifiesthestrategyusedatCookNuclearPlanttodemonstratetheoperabilityofvariousEngineeredSafetyFeatures,systemsandsub-systems.Thisproceduredefines"DeviceResponseTimeasthetimefromSafeguardsMasterRelayclosinguntilthecomponentreachesitsESFposition.Additionally,"ESFResponseTime"isdefinedasthetimeintervalfromwhenthemonitoredparameterexceedsitsESFactuationse'tpointatthechannelsensoruntiltheESFequipmentiscapableofperformingit'ssafetyfunction.TechnicalSpecificationsSurveillanceRequirementsforESFresponsetimeinSection4.3.2.1.3andTable3.3-3specifythateachEngineeredSafety.FeatureActuationSignal(ESFAS)functionwillbedemonstratedtobewithinlimitsatleastonceper18moriths.ReviewofEmergencyDieselGeneratorLoadSequencingandESFTestingrevealedtheESFresponsetimefortheESWNRCFORM366AI6-1998)
NRCFORM366AU.S.NUCLEARRETORYCOMMISSION l+,16.1998)
NRCFORM366AU.S.NUCLEARREGULATORYCOMMISSIONi6-1999)"LICENSEEEVENTREPORTtLER)TEXTCONTINUATIONFACIUTYNAMEI1)DOCKET{2)LERNUMBERI6)PAGEI3)CookNuclearPlantUnit105000-315YEARSEQUENTIALNUMBERREYIsI0N3OF4NUMBER199902300TEXT(Ifmorespaceisrequired,useadditionalcopiesofNRCForm366AJ{17)pumpsismeasuredfromtheinitiatingsensorchanneltothepumpbreakerclosure.TestingdoesnotincludethetimeforthepumptoreachtherequireddischargepressureorfortheESWpumpdischargevalvetoopen.Inearly1975,operationalproblemsidentifiedwiththeESWsystem,includingseverewaterhammeratpumpstart-up,leadtotestingbeingperformedundervariousoperationaltransients.Thistestingdidnotresultinasignificantwaterhammer,however,aprevioustestandoperatingexperienceshowedthatthewaterhammerdidnotoccurwhen'anidlepumpwasstartedwithathrottleddischargevalveeventhoughitsheaderhadnotbeenpressurizedforaslongastwelvehours.DeterminationwasmadethatthewaterhammerswereinduceduponthestartofanidleESWpumpwithafullyopendischargevalveevenwhentheheaderhadbeendepressurizedfornomorethanafewminutes.ThisdeterminationleadtomodificationofthedesignoftheESWpumpdischargevalves,suchthatthevalvesremainclosedwhentheESWpumpisidle,andareinterlockedtoopenonESWpumpstartatbreakerclosure.ResponsetimesforsensoractuationtoESWpumpbreakerclosureandESWpumpdischargeMOVstroketimesaremeasuredundertheSurveillanceTestProgram.However,thesetimesarenotcombinedtoprovideanoverallESFresponsetimewhichmeetstheTSdefinitionandwhichiscomparedtoanacceptancecriteria.TheESFresponsetimetestprocedurewasreviewedtoverifythatESFpumpsotherthanESWaretestedfrompumpstarttorequiredsystempressure/flow.Eachwasverifiedtoincluderequirementstomeasuretheoverallresponsetimefromsensoractuationuntilanacceptabledischargepressureorflowprescribedbyacceptancecriteria.AlthoughtheESWESFresponsetimesareincludedinUFSARTable7.2-7,ESWresponsetimesarenotexplicitlyincludedintheUFSARChapter14.0accidentanalysisassumptions.ESWisnotimmediatelyrequiredtosupportthecontainmentspraysystem(CTS)andEmergencyDieselGeneratorduringadesignbasisLossofCoolantAccident(LOCA).ESWsystemperformancerecordsandsurveillancetestresultsprovidereasonableassurancethatthesystemhasremainedcapableofperformingitsintendedfunctions.Basedupontheaboveinformation,therewereminimalsafetyimplicationstothehealthandsafetyofthepublicasaresultofthisevent.CORRECTIVEACTIONSSurveillancetestswillberevisedandimplementedtoincludethetimetoachieveprescribedpumpdischargepressure/flowand/ordischargevalvepositionaspartoftheoverallESFresponsetimetestingfortheESWsystempriortorestartofeachrespectiveunit.TheESWESFresponsetimesinUFSARTable7.2-7willbeevaluatedandrevised,ifnecessary,priortorestartofeachrespectiveunit.AsdiscussedinletterAEP:NRC:1260GH,"DonaldC.CookNuclearPowerPlant,Units1and2,EnforcementActions98-150,98-151,98-152and98-156,ReplyToNoticeOfViolationDatedOctober13,1998,"datedMarch19,1999,asurveillanceprogramownerandmanagerpositionhasbeenestablished,reportingtotheWorkControlDirector.ALeadershipPlanhasbeendevelopedwhichincludesthecreationofadetailedsurveillancedatabasetoalignsurveillancerequirementstospecificimplementingproceduresandacomprehensiveadequacyreviewofsurveillancetestingprocedures.AspreviouslydiscussedinLER315/99-021-00andaspartofRestartActionPlan00001fortheProgrammaticBreakdowninSurveillanceTesting,theadequacyoftheTSsurveillanceprogramwillbeevaluated.ThisevaluationincludesverificationthatTSsurveillancerequirementsforallmodesofplantoperationareincorporatedintoTSsurveillancetestprocedures.Also,aspartoftheRestarteffort,SystemandprogrammaticassessmentsintheExpandedSystemReadinessReviewsandLicensingBasisReviewsarereestablishinganddocumentingtheplant'sDesignandLicensingBasis.NRCFORM366Ai6-1999)  
LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAMEI1)DocKETI2)LERNUMBER(6)PAGEI3)CookNuclearPlantUnit105000-315 "EAR1999SEQUENTIAL NUMBER023REVISION2QF4NUMBER00TEXTllfmorespaceisrequired, useadditional copiesofNRCForm366AJ)17)CONDITIONS PRIORTOEVENTUnit1wasdefueledUnit2wasdefueledDESCRIPTION OFTHEEVENTOnJune24,1999,duringareviewofthefindingsofExpandedSystemReadiness Review(ESRR)teambyPerformance Assurance (PA),itwasdocumented thatnotestingprogramcouldbeidentified whichverifiesthecapability oftheEssential ServiceWater(ESW)pumpstomeettheEngineered SafetyFeature(ESF)responsetimespecified intheTechnical Specifications ortheUpdatedSafetyAnalysisReport.Subsequent investigation ofthiscondition byEngineering, completed September 1,1999,confirmed thattheacceptance criteriaforin-placeTechnical Specification surveillance testingdefinedtheESFresponsetimefortheESWpumpsastheelapsedtimefromactuation ofthechannelsensoruntilpumpbreakerclosure.Testingdidnotincludethetimeuntilaspecified pumpdischarge pressureisreachedortheESWpumpdischarge valveisopen,asrequiredbythedefinition ofEngineered SafetyFeatureResponseTime.TheTechnical Specification (TS)andUFSARdefinition ofEngineered SafetyFeatureResponseTime.isthattimeintervalfromwhenthemonitored parameter exceedsitsESFactuation setpointatthechannelsensortountiltheESFequipment iscapableofperforming itssafetyfunction(i.e.,thevalvestraveltotheirrequiredpositions, pumpdischarge pressures reachtheirrequiredvalues,etc.).Sinceexistingsurveillance testingdidnotsatisfytheTSdefinition ofESFresponsetime,theidentified condition constitutes amissedsurveillance test.CAUSEOFTHEEVENTTheapparentcauseofthiseventwasinadequate understanding ofthedesignbasisoftheplant.Duringthedevelopment oftheESWESFresponsetimes,thedesignbasisrequirements forESWavailability duringanaccidentwereinadequately understood.
Thisresultedinsurveillance procedures forESWwhichdidnotsatisfytheUFSARandTechnical Specification definition ofESFresponsetime.ANALYSISOFTHEEVENTTheTechnical Specification (TS)andUFSARdefinition ofEngineered'Safety FeatureResponseTimeisthattimeintervalfromwhenthemonitored parameter exceedsitsESFactuation setpointatthechannelsensortountiltheESFequipment iscapableofperforming itssafetyfunction(i.e.,thevalvestraveltotheirrequiredpositions, pumpdischarge pressures reachtheirrequiredvalues,etc.).Sinceexistingsurveillance testingdidnotsatisfytheTSdefinition ofESFresponsetime,theidentified condition constitutes amissedsurveillance test.Thisisanoperation orcondition prohibited byTSandwasdetermined tobereportable pursuanttotherequirements of10CFR50.73(a)(2)(i)(B) onSeptember 7,1999.ResponsetimesforEngineered SafetyFeaturesareprovidedintheUFSAR,Section7.2,Table7.2-7.TheESFResponseTimeBasisProcedure specifies thestrategyusedatCookNuclearPlanttodemonstrate theoperability ofvariousEngineered SafetyFeatures, systemsandsub-systems.
Thisprocedure defines"DeviceResponseTimeasthetimefromSafeguards MasterRelayclosinguntilthecomponent reachesitsESFposition.
Additionally, "ESFResponseTime"isdefinedasthetimeintervalfromwhenthemonitored parameter exceedsitsESFactuation se'tpoint atthechannelsensoruntiltheESFequipment iscapableofperforming it'ssafetyfunction.
Technical Specifications Surveillance Requirements forESFresponsetimeinSection4.3.2.1.3 andTable3.3-3specifythateachEngineered Safety.FeatureActuation Signal(ESFAS)functionwillbedemonstrated tobewithinlimitsatleastonceper18moriths.ReviewofEmergency DieselGenerator LoadSequencing andESFTestingrevealedtheESFresponsetimefortheESWNRCFORM366AI6-1998)
NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION i6-1999)"LICENSEEEVENTREPORTtLER)TEXTCONTINUATION FACIUTYNAMEI1)DOCKET{2)LERNUMBERI6)PAGEI3)CookNuclearPlantUnit105000-315 YEARSEQUENTIAL NUMBERREYIsI0N3OF4NUMBER199902300TEXT(Ifmorespaceisrequired, useadditional copiesofNRCForm366AJ{17)pumpsismeasuredfromtheinitiating sensorchanneltothepumpbreakerclosure.Testingdoesnotincludethetimeforthepumptoreachtherequireddischarge pressureorfortheESWpumpdischarge valvetoopen.Inearly1975,operational problemsidentified withtheESWsystem,including severewaterhammeratpumpstart-up, leadtotestingbeingperformed undervariousoperational transients.
Thistestingdidnotresultinasignificant waterhammer,however,aprevioustestandoperating experience showedthatthewaterhammerdidnotoccurwhen'anidlepumpwasstartedwithathrottled discharge valveeventhoughitsheaderhadnotbeenpressurized foraslongastwelvehours.Determination wasmadethatthewaterhammerswereinduceduponthestartofanidleESWpumpwithafullyopendischarge valveevenwhentheheaderhadbeendepressurized fornomorethanafewminutes.Thisdetermination leadtomodification ofthedesignoftheESWpumpdischarge valves,suchthatthevalvesremainclosedwhentheESWpumpisidle,andareinterlocked toopenonESWpumpstartatbreakerclosure.Responsetimesforsensoractuation toESWpumpbreakerclosureandESWpumpdischarge MOVstroketimesaremeasuredundertheSurveillance TestProgram.However,thesetimesarenotcombinedtoprovideanoverallESFresponsetimewhichmeetstheTSdefinition andwhichiscomparedtoanacceptance criteria.
TheESFresponsetimetestprocedure wasreviewedtoverifythatESFpumpsotherthanESWaretestedfrompumpstarttorequiredsystempressure/flow.
Eachwasverifiedtoincluderequirements tomeasuretheoverallresponsetimefromsensoractuation untilanacceptable discharge pressureorflowprescribed byacceptance criteria.
AlthoughtheESWESFresponsetimesareincludedinUFSARTable7.2-7,ESWresponsetimesarenotexplicitly includedintheUFSARChapter14.0accidentanalysisassumptions.
ESWisnotimmediately requiredtosupportthecontainment spraysystem(CTS)andEmergency DieselGenerator duringadesignbasisLossofCoolantAccident(LOCA).ESWsystemperformance recordsandsurveillance testresultsprovidereasonable assurance thatthesystemhasremainedcapableofperforming itsintendedfunctions.
Basedupontheaboveinformation, therewereminimalsafetyimplications tothehealthandsafetyofthepublicasaresultofthisevent.CORRECTIVE ACTIONSSurveillance testswillberevisedandimplemented toincludethetimetoachieveprescribed pumpdischarge pressure/flow and/ordischarge valvepositionaspartoftheoverallESFresponsetimetestingfortheESWsystempriortorestartofeachrespective unit.TheESWESFresponsetimesinUFSARTable7.2-7willbeevaluated andrevised,ifnecessary, priortorestartofeachrespective unit.Asdiscussed inletterAEP:NRC:1260GH, "DonaldC.CookNuclearPowerPlant,Units1and2,Enforcement Actions98-150,98-151,98-152and98-156,ReplyToNoticeOfViolation DatedOctober13,1998,"datedMarch19,1999,asurveillance programownerandmanagerpositionhasbeenestablished, reporting totheWorkControlDirector.
ALeadership Planhasbeendeveloped whichincludesthecreationofadetailedsurveillance databasetoalignsurveillance requirements tospecificimplementing procedures andacomprehensive adequacyreviewofsurveillance testingprocedures.
Aspreviously discussed inLER315/99-021-00 andaspartofRestartActionPlan00001fortheProgrammatic Breakdown inSurveillance Testing,theadequacyoftheTSsurveillance programwillbeevaluated.
Thisevaluation includesverification thatTSsurveillance requirements forallmodesofplantoperation areincorporated intoTSsurveillance testprocedures.
Also,aspartoftheRestarteffort,Systemandprogrammatic assessments intheExpandedSystemReadiness ReviewsandLicensing BasisReviewsarereestablishing anddocumenting theplant'sDesignandLicensing Basis.NRCFORM366Ai6-1999)  


NRCFORM366AU.S.NUCLEARREGULATORYCOMMISSIONI6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATIONFACILITYNAMEI1)CookNuclear'lantUnit1DOCKETI2)05000-315YEARLERNUMBERI6)SEQUENTIALREVISIONNUMBERNUMBERPAGEI3)4OF4199902300TEXT(lfmorespacoisrequired,usoadditionalcopiesofNRCForm386A/I17)SIMILAREVENTS315/99-010-00315/99-015-00315/99-016-00315/99-021-00NRCFORM366AI6.1998)  
NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION I6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAMEI1)CookNuclear'lant Unit1DOCKETI2)05000-315 YEARLERNUMBERI6)SEQUENTIAL REVISIONNUMBERNUMBERPAGEI3)4OF4199902300TEXT(lfmorespacoisrequired, usoadditional copiesofNRCForm386A/I17)SIMILAREVENTS315/99-010-00 315/99-015-00 315/99-016-00 315/99-021-00 NRCFORM366AI6.1998)  
~'J}}
~'J}}

Revision as of 07:04, 29 June 2018

LER 99-023-00:on 990907,inadequate TS Surveillance Testing of ESW Pump ESF Response Time Noted.Caused by Inadequate Understanding of Plant Design Basis.Surveillance Tests Will Be Revised & Implemented
ML17335A553
Person / Time
Site: Cook American Electric Power icon.png
Issue date: 10/07/1999
From: DEPUYDT M B
INDIANA MICHIGAN POWER CO.
To:
Shared Package
ML17335A552 List:
References
LER-99-023, NUDOCS 9910130194
Download: ML17335A553 (7)


Text

NRCFORM366U.S.NUCLEARREGULATCOMMISSION ie-1999)LICENSEEEVENTREPORT(LER)(Seereverseforrequirednumberofdigits/characters, foreachblock)APPROVMBNO.3150-0104 EXPIRES06/30/2001 Estimated burdenperresponsetocomplywiththismandatory information cogection request:50hrs.Reportedlessonslearnedareincorporated intothelicensing processandfedbacktoindustry.

Forwardcommentsregarding burdenestimatetotheRecordsManagement Branch(T4F33),U.S.NuclearRegutatory Commission.

Washington, DC205554&1, andtothePapenNork Reduction Project(3t504104),

OiriceofManagement andBudget.Washington.

DC20503.lfaninformation collection doesnotdisplayacurrently valrdOMBcontrolnumber.theNRCmaynotconductorsponsor,andapersonisnotrequiredtorespondto.theinformation collection.

FACILITYNAME(1)CookNuclearPlantUnit1DOCKETNUMBERI2)05000-315 PAGEI3)1OF4TITLEt4)Inadequate Technical Specification Surveillance TestingofEssential ServiceWaterPumpEngineered SafetyFeatureResponseTimeEVENTDATE{5)LERNUMBER{6)REPORTDATE(7)OTHERFACILITIES INVOLVED(8)MONTHDAYYEARYEAR1999SEQUENTIAL REVISIONNUMBERNUMBERMONTHDAYYEARFACILITYNAMEFACIUIYNAMEDOCKETNUMBERDOCKETNUMBEROPERATING MODE(9)POWERLEVEL(10)20.2201(b)20.2203(a)

(1)20.2203(a)(2)

(i)20.2203(a)

(2)(v)20.2203(a)(3)(I) 20.2203(a)(3)(ii) 50.73(a)(2)(i) 50.73(a)(2)(ii) 50.73(a)(2)(iii)

DPURSUANTTOTHEREQUIREMENTS OF10CFR5:(CheckTHISREPORTISSUBMITTEoneormoro){11)50.73(a)(2){viii)50.73(a)(2)(x)73.7120.2203(a)(2)(ii) 20.2203(a)(2)(iii) 20.2203(a)

{2)(iv)20.2203(a)

(4)50.36(c){1)50.36(c)(2)

LICENSEECONTACTFORTHISLER{12)50.73(a)(2)(iv) 50.73(a)(2)

(v)50.73(a)(2)(vii)OTHERSpecifyinAbstractbeloworInNRCForm366ANAMEMaryBethDepuydt,Regulatory Compliance TELEPHONE NUMBERIInrSudeAreaCode)(616)465-5901X1589COMPLETEONELINEFOREACHCOMPONENT FAILUREDESCRIBED INTHISREPORT(13)cAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE ToEPIXCAUSESYSTEMCOMPONENT MANUFACTURER REPORTABLE ToEPIXSUPPLEMENTAL REPORTEXPECTED14YEs{Ifyes,completeEXPECTEDSUBMISSION DATE).NOEXPECTEDMONTHDAYYEARABSTRACT(Limitto1400spaces,i.o.,approximately 15single-spaced typewritten linos)(16)OnJune24,1999,duringareviewofthefindingsofExpandedSystemReadiness Review(ESRR)teambyPerformance Assurance (PA),itwasdiscovered thatnotestingprogramcouldbeidentified whichverifiesthecapability oftheEssential ServiceWater(ESW)pumpstomeettheEngineered SafetyFeature(ESF)responsetimespeciTied intheTechnical Specifications (TS)ortheUpdatedSafetyAnalysisReport.Subsequent investigation confirmed thatin-placeTSsurveillance testingmeasuredtheESFresponsetimefortheESWpumpsastheelapsedtimefromactuation ofthechannelsensoruntilpumpbreakerclosure,butdidnotincludethetimeuntilaspecified pumpdischarge pressureisreachedoruntiltheESWpumpdischarge valveisopen;asrequiredbythedefinition ofEngineered SafetyFeatureResponseTime.Sinceexistingsurveillance testingdidnotsatisfytheTSdefinition ofESFresponsetime,theidentified condition constitutes amissedsurveillance test.Thisisanoperation orcondition prohibited byTSandwasdetermined tobereportable pursuanttotherequirements of10CFR50.73(a)(2)(i)(B) onSeptember 7,1999.Theapparentcauseofthiseventwastheinadequate understanding oftheplantdesignbasis.Surveillance testswillberevisedandimplemented toincludethetimetoachieveprescribed pumpdischarge pressure/flow and/ordischarge valvepositionaspartoftheoverallESFresponsetimetestingfortheESWsystempriortorestartofeachrespective unit.TheESWESFresponsetimesinUFSARTable7.2-7willbeevaluated andrevised,ifnecessary, priortorestartofeachrespective unit.ESWsystemperformance recordsandsurveillance testresultsprovidereasonable assurance thatthesystemhasremainedcapableofperforming itsinterlded functions.

Therefore, therewereminimalsafetyimplications tothehealthandsafetyofthepublicasaresultofthisevent.'I)9i0i30i94 99i007PDRADGCI{l050003i5SPDR

NRCFORM366AU.S.NUCLEARRETORYCOMMISSION l+,16.1998)

LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAMEI1)DocKETI2)LERNUMBER(6)PAGEI3)CookNuclearPlantUnit105000-315 "EAR1999SEQUENTIAL NUMBER023REVISION2QF4NUMBER00TEXTllfmorespaceisrequired, useadditional copiesofNRCForm366AJ)17)CONDITIONS PRIORTOEVENTUnit1wasdefueledUnit2wasdefueledDESCRIPTION OFTHEEVENTOnJune24,1999,duringareviewofthefindingsofExpandedSystemReadiness Review(ESRR)teambyPerformance Assurance (PA),itwasdocumented thatnotestingprogramcouldbeidentified whichverifiesthecapability oftheEssential ServiceWater(ESW)pumpstomeettheEngineered SafetyFeature(ESF)responsetimespecified intheTechnical Specifications ortheUpdatedSafetyAnalysisReport.Subsequent investigation ofthiscondition byEngineering, completed September 1,1999,confirmed thattheacceptance criteriaforin-placeTechnical Specification surveillance testingdefinedtheESFresponsetimefortheESWpumpsastheelapsedtimefromactuation ofthechannelsensoruntilpumpbreakerclosure.Testingdidnotincludethetimeuntilaspecified pumpdischarge pressureisreachedortheESWpumpdischarge valveisopen,asrequiredbythedefinition ofEngineered SafetyFeatureResponseTime.TheTechnical Specification (TS)andUFSARdefinition ofEngineered SafetyFeatureResponseTime.isthattimeintervalfromwhenthemonitored parameter exceedsitsESFactuation setpointatthechannelsensortountiltheESFequipment iscapableofperforming itssafetyfunction(i.e.,thevalvestraveltotheirrequiredpositions, pumpdischarge pressures reachtheirrequiredvalues,etc.).Sinceexistingsurveillance testingdidnotsatisfytheTSdefinition ofESFresponsetime,theidentified condition constitutes amissedsurveillance test.CAUSEOFTHEEVENTTheapparentcauseofthiseventwasinadequate understanding ofthedesignbasisoftheplant.Duringthedevelopment oftheESWESFresponsetimes,thedesignbasisrequirements forESWavailability duringanaccidentwereinadequately understood.

Thisresultedinsurveillance procedures forESWwhichdidnotsatisfytheUFSARandTechnical Specification definition ofESFresponsetime.ANALYSISOFTHEEVENTTheTechnical Specification (TS)andUFSARdefinition ofEngineered'Safety FeatureResponseTimeisthattimeintervalfromwhenthemonitored parameter exceedsitsESFactuation setpointatthechannelsensortountiltheESFequipment iscapableofperforming itssafetyfunction(i.e.,thevalvestraveltotheirrequiredpositions, pumpdischarge pressures reachtheirrequiredvalues,etc.).Sinceexistingsurveillance testingdidnotsatisfytheTSdefinition ofESFresponsetime,theidentified condition constitutes amissedsurveillance test.Thisisanoperation orcondition prohibited byTSandwasdetermined tobereportable pursuanttotherequirements of10CFR50.73(a)(2)(i)(B) onSeptember 7,1999.ResponsetimesforEngineered SafetyFeaturesareprovidedintheUFSAR,Section7.2,Table7.2-7.TheESFResponseTimeBasisProcedure specifies thestrategyusedatCookNuclearPlanttodemonstrate theoperability ofvariousEngineered SafetyFeatures, systemsandsub-systems.

Thisprocedure defines"DeviceResponseTimeasthetimefromSafeguards MasterRelayclosinguntilthecomponent reachesitsESFposition.

Additionally, "ESFResponseTime"isdefinedasthetimeintervalfromwhenthemonitored parameter exceedsitsESFactuation se'tpoint atthechannelsensoruntiltheESFequipment iscapableofperforming it'ssafetyfunction.

Technical Specifications Surveillance Requirements forESFresponsetimeinSection4.3.2.1.3 andTable3.3-3specifythateachEngineered Safety.FeatureActuation Signal(ESFAS)functionwillbedemonstrated tobewithinlimitsatleastonceper18moriths.ReviewofEmergency DieselGenerator LoadSequencing andESFTestingrevealedtheESFresponsetimefortheESWNRCFORM366AI6-1998)

NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION i6-1999)"LICENSEEEVENTREPORTtLER)TEXTCONTINUATION FACIUTYNAMEI1)DOCKET{2)LERNUMBERI6)PAGEI3)CookNuclearPlantUnit105000-315 YEARSEQUENTIAL NUMBERREYIsI0N3OF4NUMBER199902300TEXT(Ifmorespaceisrequired, useadditional copiesofNRCForm366AJ{17)pumpsismeasuredfromtheinitiating sensorchanneltothepumpbreakerclosure.Testingdoesnotincludethetimeforthepumptoreachtherequireddischarge pressureorfortheESWpumpdischarge valvetoopen.Inearly1975,operational problemsidentified withtheESWsystem,including severewaterhammeratpumpstart-up, leadtotestingbeingperformed undervariousoperational transients.

Thistestingdidnotresultinasignificant waterhammer,however,aprevioustestandoperating experience showedthatthewaterhammerdidnotoccurwhen'anidlepumpwasstartedwithathrottled discharge valveeventhoughitsheaderhadnotbeenpressurized foraslongastwelvehours.Determination wasmadethatthewaterhammerswereinduceduponthestartofanidleESWpumpwithafullyopendischarge valveevenwhentheheaderhadbeendepressurized fornomorethanafewminutes.Thisdetermination leadtomodification ofthedesignoftheESWpumpdischarge valves,suchthatthevalvesremainclosedwhentheESWpumpisidle,andareinterlocked toopenonESWpumpstartatbreakerclosure.Responsetimesforsensoractuation toESWpumpbreakerclosureandESWpumpdischarge MOVstroketimesaremeasuredundertheSurveillance TestProgram.However,thesetimesarenotcombinedtoprovideanoverallESFresponsetimewhichmeetstheTSdefinition andwhichiscomparedtoanacceptance criteria.

TheESFresponsetimetestprocedure wasreviewedtoverifythatESFpumpsotherthanESWaretestedfrompumpstarttorequiredsystempressure/flow.

Eachwasverifiedtoincluderequirements tomeasuretheoverallresponsetimefromsensoractuation untilanacceptable discharge pressureorflowprescribed byacceptance criteria.

AlthoughtheESWESFresponsetimesareincludedinUFSARTable7.2-7,ESWresponsetimesarenotexplicitly includedintheUFSARChapter14.0accidentanalysisassumptions.

ESWisnotimmediately requiredtosupportthecontainment spraysystem(CTS)andEmergency DieselGenerator duringadesignbasisLossofCoolantAccident(LOCA).ESWsystemperformance recordsandsurveillance testresultsprovidereasonable assurance thatthesystemhasremainedcapableofperforming itsintendedfunctions.

Basedupontheaboveinformation, therewereminimalsafetyimplications tothehealthandsafetyofthepublicasaresultofthisevent.CORRECTIVE ACTIONSSurveillance testswillberevisedandimplemented toincludethetimetoachieveprescribed pumpdischarge pressure/flow and/ordischarge valvepositionaspartoftheoverallESFresponsetimetestingfortheESWsystempriortorestartofeachrespective unit.TheESWESFresponsetimesinUFSARTable7.2-7willbeevaluated andrevised,ifnecessary, priortorestartofeachrespective unit.Asdiscussed inletterAEP:NRC:1260GH, "DonaldC.CookNuclearPowerPlant,Units1and2,Enforcement Actions98-150,98-151,98-152and98-156,ReplyToNoticeOfViolation DatedOctober13,1998,"datedMarch19,1999,asurveillance programownerandmanagerpositionhasbeenestablished, reporting totheWorkControlDirector.

ALeadership Planhasbeendeveloped whichincludesthecreationofadetailedsurveillance databasetoalignsurveillance requirements tospecificimplementing procedures andacomprehensive adequacyreviewofsurveillance testingprocedures.

Aspreviously discussed inLER315/99-021-00 andaspartofRestartActionPlan00001fortheProgrammatic Breakdown inSurveillance Testing,theadequacyoftheTSsurveillance programwillbeevaluated.

Thisevaluation includesverification thatTSsurveillance requirements forallmodesofplantoperation areincorporated intoTSsurveillance testprocedures.

Also,aspartoftheRestarteffort,Systemandprogrammatic assessments intheExpandedSystemReadiness ReviewsandLicensing BasisReviewsarereestablishing anddocumenting theplant'sDesignandLicensing Basis.NRCFORM366Ai6-1999)

NRCFORM366AU.S.NUCLEARREGULATORY COMMISSION I6-1998)LICENSEEEVENTREPORT(LER)TEXTCONTINUATION FACILITYNAMEI1)CookNuclear'lant Unit1DOCKETI2)05000-315 YEARLERNUMBERI6)SEQUENTIAL REVISIONNUMBERNUMBERPAGEI3)4OF4199902300TEXT(lfmorespacoisrequired, usoadditional copiesofNRCForm386A/I17)SIMILAREVENTS315/99-010-00 315/99-015-00 315/99-016-00 315/99-021-00 NRCFORM366AI6.1998)

~'J