On July 8, 2003, Columbia Generating Station (Columbia) was in Mode I with the reactor operating at approximately 73 percent of rated thermal power. At 1008 PDT, Reactor Core Isolation Cooling ( RCIC) was declared inoperable after one of its steam supply containment isolation valves (RCIC-V-63) was inadvertently closed during the performance of a surveillance test. The surveillance test was discontinued and plant operators verified that the High Pressure Core Spray System was operable as required by Technical Specifications. The RCIC system was restored to its normal standby lineup and declared operable within one hour.
The cause of this event was a personnel error by an I&C technician who was involved in performing a channel functional test at a differential pressure indicating switch (RC1C-DPIS-13B) which senses steam flow to the RCIC turbine, Tice technician inadvertently applied pressure from a nitrogen bottle to the high pressure side of ROC-DNS-13B causing an upscale condition which closed RCIC-V-63 before it was deactivated in accordance with the test procedure.
The technicians involved in this event have been coached concerning human performance and the proper use of self-checking and peer-checking techniques. This incident was referenced as a recent example of a human performance error in human performance timeouts with maintenance teams. The I&C Training Advisory Group will review this issue to determine how it should be included in future training.
I. � .
26158 |
Event Description
On July 8, 2013, Columbia Generating Station (Columbia) was in Mode 1 with the reactor operating at approximately 73 percent of rated thermal power. At approximately 1008 PDT, the Reactor Core Isolation Cooling System (RCIC) steam supply line outboard isolation valve, RCIC-V-63, closed. This caused RCIC to become inoperable.
The closure of RCIC-V-63 occurred while performing surveillance procedure ISP-RCIC-Q903, "RCIC Isolation on RCIC Steam Flow High Div 2 - cFricc- (Channel Functional Test/Channel Calibration].
Surveillance procedure ISP-RCIC-Q903 provides instructions for the channel functional test and channel calibration of the division 2 RCIC steam line flow high instrument channel.
Two technicians were setting up to perform a channel functional test of differential pressure indicating switch RCIC-DPIS-13B. RCIC-DPIS-13B senses steam flow in the steam supply piping to the RCIC turbine. If the differential pressure to the switch is above the switch setpoint, the steam line high differentia! pressure annunciator will activate in the control room and RCIC-V-63 will close.
The surveillance test procedure calls for isolating RCIC-DPIS-13B, connecting water pots to its test valves, and connecting a low pressure source (in this case nitrogen) and test gauge to the high pressure side water pot. Once the low pressure source is connected to the high pressure side water pot, the procedure calls for opening the breaker to RCIC-V-63 so it will not close when RCIC-DPIS-13B is actuated during the test. The procedure calls for raising input (nitrogen) pressure after the breaker for RCIC-V-63 is open.
The low pressure source used to conduct the test was set up using a nitrogen bottle, high pressure air regulator, low pressure air regulator, test gauge and hoses. The high pressure regulator was used to lower the pressure of the nitrogen bottle to a usable range for the low pressure regulator. The low pressure regulator provided pressure directly to the water pot on the high pressure side of RCIC-DPIS- 13B.
While the technician located at RCIC-DPIS-13B was waiting for Operations personnel to open the breaker to RCIC-V-63, he proceeded to pressurize the test set-up. He opened the valve on the nitrogen bottle which feeds the high pressure regulator. The high pressure regulator was closed which prevented pressure from being applied to the low pressure regulator. The technician then adjusted the high pressure air regulator but failed to verify that the low pressure regulator was closed. The low pressure regulator was not closed, allowing uncontrolled pressure to be applied to the high pressure side of RCIC-DPIS-13B. RCIC-DPIS-13B went upscale and actuated RCIC-V-63, causing it to close.
26158 R2 26158 R2
Cause of Event
The cause of this event was a personnel error by one of the I&C technicians performing the surveillance test. The technician who opened the high pressure regulator failed to use proper self-checking techniques to ensure that the pressure regulators were closed prior to introducing nitrogen pressure into them. This allowed an uncontrolled pressure to be introduced to the high pressure side of RCIC-DPIS- 138, causing it to go upscale and isolate RCIC-V-63.
Safety Significance
The RCIC system is designed to operate either manually or automatically following reactor pressure vessel isolation accompanied by a loss of coolant flow from the feedwater system to provide adequate core cooling and control of RPV water level. Under these conditions, the High Pressure Core Spray (HPCS) and RCIC systems perform similar functions. After the loss of RCIC, control room operators entered Technical Specification (TS) Action 3.5.3.A, which requires that with the RCIC inoperable, verify by administrative means that HPCS is operable and restore the RCIC system to operable status within 14 days. Since HPCS was verified to be operable and the total duration of this event was 'approximately one hour, the TS requirements were satisfied. Therefore, it is concluded that this event posed no threat to the health and safety of the public or plant personnel.
This event is reportable under 10 CFR 50.73 (a)(2Xv)(D).
Immediate Corrective Actions
Control room operators entered and complied with TS Action Statement 3.5.3.A, by verifying that HPCS was operable. Operators then proceeded to take action to protect HPCS. The Control Room Supervisor stopped performance of ISP-RCIC-Q903, and instructed the I&C technicians to back-out of the surveillance procedure and restore all components to their normal line-up. After all components were restored to their normal line-up, RCIC was placed in a normal line-up with RCIC-V-63 open and declared operable at 1100 PDT.
Further Corrective Actions The technicians involved in this event have been coached concerning human performance and the proper use of self-checking and peer-checking techniques.
A management timeout on human performance errors has been conducted with maintenance teams.
This incident was used as one of the examples in the human performance timeout.
The I&C Training Advisory Group will review this issue to determine how it should be included in future training.
LER NUMBER (6) � I � !PAGE (31_ SEGLEMAI. I REVISION DOCKET (2) FACILITY NAME (1) Columbia Generating Station
Previous Similar Events
A search of the Columbia Problem Evaluation Request (PER) database and LER database was conducted. The search covered the period from 1999 to the date of this event and identified no events involving an ROC isolation due to personnel error.
EITS Information Text Reference � System � Component Reactor Core Isolation Cooling System � BN High Pressure Core Spray System � BG RCIC-DPIS-13B � BN � PDIS RCIC-V-63 � BN � ISV 26158 R2
|
---|
|
|
| | Reporting criterion |
---|
05000397/LER-2003-001, For Columbia Residual Heat Removal (RHR) B Train Potentially Inoperable During a Design Basis Event Due to Apparent Inability of System to Adequately Maintain Pressure as Assumed in Appendix R Analysis | For Columbia Residual Heat Removal (RHR) B Train Potentially Inoperable During a Design Basis Event Due to Apparent Inability of System to Adequately Maintain Pressure as Assumed in Appendix R Analysis | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000397/LER-2003-003, And 03-005-00 for Columbia Regarding Interruption of Flow in the Residual Heat Removal System While in the Shutdown Cooling Mode of Operation | And 03-005-00 for Columbia Regarding Interruption of Flow in the Residual Heat Removal System While in the Shutdown Cooling Mode of Operation | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(iv), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000397/LER-2003-004, For Columbia Generating Station Re Condition Prohibited by Technical Specifications Limiting Condition for Operation 3.10.4 | For Columbia Generating Station Re Condition Prohibited by Technical Specifications Limiting Condition for Operation 3.10.4 | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2) 10 CFR 50.73(a)(2)(viii)(A) | 05000397/LER-2003-005, For Columbia Generating Station, Shutdown Cooling Isolation Caused by Procedure Deficiency | For Columbia Generating Station, Shutdown Cooling Isolation Caused by Procedure Deficiency | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2) 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | 05000397/LER-2003-006, Regarding Failure to Restore Emergency Diesel Generator within TS Completion Time & Subsequent Plant Shutdown | Regarding Failure to Restore Emergency Diesel Generator within TS Completion Time & Subsequent Plant Shutdown | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2) | 05000397/LER-2003-007, Automatic Reactor Scram Due to a Main Transformer Differential Current Relay Actuation | Automatic Reactor Scram Due to a Main Transformer Differential Current Relay Actuation | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000397/LER-2003-008, Reactor Core Isolation Due to Inadvertent Closure of Containment Isolation Valve During Testing | Reactor Core Isolation Due to Inadvertent Closure of Containment Isolation Valve During Testing | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2) 10 CFR 50.73(a)(2)(1) | 05000397/LER-2003-009, Regarding Reactor Core Isolation Cooling Rendered Inoperable Due to a 250 Vdc Battery Cell Not Meeting TS Requirements | Regarding Reactor Core Isolation Cooling Rendered Inoperable Due to a 250 Vdc Battery Cell Not Meeting TS Requirements | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | 05000397/LER-2003-010, Regarding Unanticipated Inoperability of the Single Train High Pressure Core Spray System | Regarding Unanticipated Inoperability of the Single Train High Pressure Core Spray System | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | 05000397/LER-2003-011, Vulnerability in Safeguards System That Could Allow Unauthorized or Undetected Access to Protected Area | Vulnerability in Safeguards System That Could Allow Unauthorized or Undetected Access to Protected Area | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) | 05000397/LER-2003-012, Regarding Unanticipated Inoperability of Both Trains of Control Room Emergency Filtration System | Regarding Unanticipated Inoperability of Both Trains of Control Room Emergency Filtration System | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) |
|