05000382/LER-2011-005

From kanterella
Revision as of 23:56, 30 November 2017 by StriderTol (talk | contribs) (Created page by program invented by StriderTol)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
LER-2011-005, 1 OF 4
Waterford 3 Steam Electric Station
Event date: 10-20-2011
Report date: 12-19-2011
Reporting criterion: 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat
Initial Reporting
ENS 47361 10 CFR 50.72(b)(3)(v)(B), Loss of Safety Function - Remove Residual Heat
3822011005R00 - NRC Website

REPORTABLE OCCURRENCE

With turbine driven Emergency Feedwater (EFW) Pump AB [P] out of service for preplanned maintenance, Essential Chiller B [CHU] failed to automatically restart from a load recycle, causing the unplanned inoperability of Essential Chilled Water (CHW) Loop B. The application of cascading technical specifications rendered motor driven EFW Pump B inoperable. The remaining operable motor driven EFW Pump A [P] is a design rated 50 percent pump; therefore, this event could have prevented fulfillment of the residual heat removal safety function.

This event is reportable as a Licensee Event Report (LER) under reporting criteria 10CFR50.73(a)(2)(v)(B): Event that could have prevented the fulfillment of the safety function of structures or systems that are needed to ... remove residual heat.

This event was initially reported as an 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> notification to the NRC Headquarters Operations Center (HOC) as EN 47361.

INITIAL CONDITIONS

On October 20, 2011, Waterford Steam Electric Station Unit 3 (W3) was operating in Mode 1, stable at 100% power. Maintenance was occurring which made the turbine driven EFW Pump AB [P] unavailable causing a planned entry into a 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Limiting Condition For Operation (LCO) action. All other relevant safety related equipment supporting the safety function of structures or systems was operable.

EVENT DESCRIPTION

As designed, the CHW system consists of three centrifugal chillers (A, B, and AB) and two chilled water loops (A and B). However, only two chillers are operated at the same time. The third chiller (AB) can replace either of the other two chillers, although its operability is dependent on the alignment of the swing electrical safety bus. The chillers cool water that is pumped to the cooling coils of the air handling units located throughout the plant. The chillers facilitate the transfer of heat from chilled water to the Component Cooling Water (CCW) system and the Ultimate Heat Sink (UHS) while lowering the discharge temperature of the chilled water below the supply temperature of the CCW. The chilled water loads are separated into two loops. CHW Loops A and B are safety related. Following a Safety Injection Actuation Signal (SIAS) or Loss of Offsite Power (LOOP), the two chillers aligned for operation and their associated chilled water pumps are automatically started if they are not already running.

Each chiller and chilled water pump will supply one of the two safety related chilled water loops.

The Operations crew noted that Essential Chiller B [CHU] had secured as designed on load recycle due to low chilled water temperature. The crew continued monitoring CHW Loop B temperature to ensure the expected automatic restart would occur as loop water temperature rose. When loop water temperature was noticeably above the restart setpoint, the crew noted that Essential Chiller B [CHU] had not restarted.

Essential Chiller B [CHU] was declared inoperable at 08:00 CST and the Operations crew entered the 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> action of Technical Specification (TS) 3.7.12 for CHW Loop B. As required by procedure OP- 100-014 (Technical Specification and Technical Requirements Compliance), EFW Pump B [P] was declared inoperable and TS 3.7.1.2 action f was entered as a cascaded TS. Offsite power and Train A safety related equipment and systems were verified operable.

As designed, the EFW System consists of three pumps which take a common suction from the Condensate Storage Pool, discharge to a common header, and supply water to either of two Steam Generators through flow control and isolation valves. EFW Pumps A and B are 50% capacity motor driven pumps. EFW Pump AB is a 100% capacity steam turbine driven pump. All three EFW pumps automatically start on Emergency Feedwater Actuation Signal (EFAS) and act, along with flow control and isolation valves, to automatically maintain water level in the non-faulted steam generators to provide an adequate heat sink for residual heat removal post-trip.

Although EFW Pump B [P] had been declared inoperable due to cascading TSs, it remained aligned and available for automatic response.

With only EFW Pump A [P] operable, TS 3.7.1.2 action f states: With the EFW system inoperable and unable to deliver at least 100% combined flow to the steam generators, immediately initiate action to restore the ability to deliver at least 100% combined flow to the steam generators. LCO 3.0.3 and all other LCO ACTIONs requiring MODE changes are suspended until the EFW system is capable of delivering at least 100% combined flow to the steam generators.

To mitigate the condition, the Operations crew took immediate action to align Essential Chiller AB [CHU] to replace B. When completed at 08:50, this action restored operability to CHW Loop B. The restoration of operability to CHW Loop B concurrently restored operability to EFW Pump B [P]. This restored the ability to deliver at least 100% combined EFW flow from operable pumps to the steam generators. The total duration of the event was 50 minutes.

The identified condition is entered into the site corrective action program as CR-WF3-2011-7166.

CAUSAL FACTORS

Subsequent troubleshooting of Essential Chiller B [CHU] found the K2 relay [RLY] had failed. One of its functions is to allow the chiller guide vanes to close and remain closed following a low load recycle trip.

Once the guide vane is fully closed, a limit switch is reset. This in turn allows the chiller to restart once the inlet chilled water temperature reaches 46 degrees.

CORRECTIVE ACTIONS

The corrective action to replace the K2 relay and return Essential Chiller B to operable status is complete. A corrective action is in place to determine the cause of the K2 relay failure.

SAFETY SIGNIFICANCE

The identified condition credits EFW Pump A [P] as the only operable EFW pump. As designed, EFW Pump A is a 50% capacity pump. This base condition has an adverse effect on the ability to meet the residual heat removal safety function.

One mitigating factor is that the cause of losing operability of EFW Pump B [P] can be alleviated in a moderately short time frame by manually aligning Essential Chiller AB [CHU] to replace B per established plant procedures. Plant experience has shown repeated ability to accomplish the alignment within an hour. This capability exists even during a LOOP.

The risk associated with this condition was evaluated using the Waterford 3 Probabilistic Risk Analysis (PRA) model with the Equipment Out Of Service (EGOS) monitor. The particular condition of concern is the 50 minute window when 1) the turbine driven EFW pump was out of service for planned maintenance, 2) Essential Chiller B [CHU] failed, thus renddring EFW B inoperable, and 3) Chiller AB [CHU] was not yet aligned to Chilled Water Loop B. The risk evaluation resulted in an incremental conditional core damage probability (ICCDP) of 2.45E-08 during the period prior to restoration of operability to Chilled Water Loop B. It should be noted that the PRA model conservatively assumes catastrophic failure of the EFW-B pump [P] as soon as room cooling is lost. This is a very conservative assumption since 1) a room will gradually heat up when room cooling fails, and 2) a pump will function for some amount of time after design temperatures are exceeded.

SIMILAR EVENTS

Corrective action program data for past five years was searched for K2 relay failures associated with the essential chillers. No similar events for W3 were found.

ADDITIONAL INFORMATION

Energy industry identification system (EllS) codes are identified in the text within brackets [ ].