(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
On December 10, 2002 at 0824, with the reactor at 100% power, Unit 1 was manually tripped due to loss of both Steam Generator Feed Pumps ( SGFP's). Facilities personnel were removing a catch bag near the area of the lA SGFP and the 120/208 Volt Miscellaneous Bus. An individual was applying force to break a tie-wrap which had been used to support the catch bag. When the tie-wrap broke, the individual momentarily lost his balance, reached out to steady himself, and inadvertently depressed a pushbutton on the local control panel for the 120/208 Volt Miscellaneous Bus. This resulted in deenergization of the Miscellaneous Bus and loss of control power to both SGFP's. The SGFP control valves closed resulting in loss of main feedwater to the Steam Generators. Operators manually tripped the reactor in accordance with Abnormal Operating Procedures. All safeguards equipment functioned as designed following the trip.
This event was caused by personnel error - a lack of awareness of the sensitivity of surrounding equipment and the consequences of inadvertent contact with such equipment. Contributing causes were failure to consider the consequences of actions prior to the event and failure to use the proper tool to safely remove the tie wrap.
A protective barrier has been installed over the Unit 1 Miscellaneous Bus control panel pushbuttons to prevent inadvertent contact. Access to the Unit 2 panel has been barricaded until plant conditions permit barrier installation. The individuals directly and indirectly involved have been coached on specific human performance aspects of this event. A stand down meeting of facilities personnel was held to reinforce station expectations for human performance aspects of this event, including proper tool use, situational awareness of sensitive plant equipment, communications with Operations prior to performing activities near sensitive equipment, and prejob briefings. |
Westinghouse — Pressurized Water Reactor Energy Industry Identification Codes are identified in the text as [XX]
Description of Event
On December 10, 2002 at 0824, with the reactor at 100% power, Unit 1 was manually tripped due to loss of both Steam Generator Feed Pumps (SGFP's)[SJ]. On the previous day, December 9, facilities personnel had been removing catch bags from areas in which leaks were no longer present. The individual assigned routine housekeeping activities in the turbine building on December 10 remembered that not all catch bag removal work was complete. A few feet outside the SGFP barrier, and directly behind the local control panel for the 120/208 Volt Miscellaneous Bus, a catch bag required removal.
The individual did not discuss this activity with his supervision nor with Operations prior to commencing the work. He did not have the proper tools for tie-wrap removal, and decided to apply force to break a tie-wrap which had been used to support the catch bag. He stood on a narrow raised step immediately to the side of the control panel, and reached behind it to pull the tie wrap apart. When the tie-wrap broke, the individual momentarily lost his balance, reached out to steady himself, and inadvertently struck the main feeder breaker trip pushbutton on the local control panel for the 120/208 Volt Miscellaneous Bus[EC] with his hand. This button was raised above the panel surface, but not equipped with a protective guard. Striking the button tripped the main feeder breaker causing deenergization of the Miscellaneous Bus.
The SGFP control cabinet has primary and backup power supplies fed from separate distribution panels, but both panels are powered from the same 120/208 Volt Miscellaneous Bus. Therefore, loss of the Miscellaneous Bus resulted in loss of control power to both SGFP's. Upon loss of control power, all SGFP control valves closed and main control room SGFP indication was also lost. Loss of all main feedwater to the steam generators followed.
Operators manually tripped the reactor in accordance with Abnormal Operating Procedures. All safeguards equipment functioned as designed following the trip.
In addition to the loss of the SGFPs, non safety related components which contain a thermal overload relay powered from the affected Miscellaneous Bus ceased operating or did not start as designed. When the Miscellaneous Bus was reenergized, the equipment was restarted with no further problems.
Cause of Event
This event was caused by personnel error — a lack of awareness of the sensitivity of surrounding equipment and the consequences of inadvertent contact with such equipment and lack of situational awareness that the pushbuttons on breaker control panels can affect operations.
Contributing causes were failure to consider the consequences of actions prior to the event and failure to use the proper tool to safely remove the tie wrap.
Safety Assessment The health and safety of the public were not affected by this event.
This event does not represent a Safety System Functional Failure.
Corrective Action A protective barrier has been installed over the Unit 1 Miscellaneous Bus control panel pushbuttons to prevent inadvertent contact. Access to the corresponding Unit 2 panel has been barricaded until plant conditions allow installation of a protective barrier over the pushbuttons.
The individuals directly and indirectly involved have been coached on the specifics of this event including station expectations for situational awareness, use of proper tools, communications with Operations, and prejob briefings.
A stand down meeting of facilities personnel was held to reinforce station expectations concerning human performance related to this event, including tool use, situational awareness, communications with Operations personnel prior to the start of activities near sensitive equipment, and prejob briefings.
Additional Information
A walkdown of the turbine building to identify other non recessed pushbuttons that could directly lead to a plant trip was conducted. None were identified.
The following LERs have been submitted in the past two years on reactor trips involving personnel error:
Maintenance
|
---|
|
|
| | Reporting criterion |
---|
05000255/LER-2002-001 | NONCOMPLIANCE WITH TECHNICAL SPECIFICATION REQUIREMENTS FOR SAFETY INJECTION TANK T-82D | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000219/LER-2002-001 | | 10 CFR 50.73(a)(2)(i) | 05000305/LER-2002-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000313/LER-2002-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000331/LER-2002-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000346/LER-2002-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000348/LER-2002-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000368/LER-2002-001 | | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000247/LER-2002-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition | 05000261/LER-2002-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000263/LER-2002-001 | Mechanical Pressure Regulator Failure Causes Reactor Scram | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000266/LER-2002-001 | | 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System | 05000277/LER-2002-001 | | | 05000289/LER-2002-001 | | | 05000301/LER-2002-001 | | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000353/LER-2002-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000400/LER-2002-001 | | 10 CFR 50.73(a)(2)(iv), System Actuation | 05000397/LER-2002-001 | | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000361/LER-2002-001 | | | 05000454/LER-2002-001 | Multiple Main Steam Safety Valve Relief Tests Exceeded Required Tolerance Due to Disk to Nozzle Metallic Bonding and Setpoint Drift | 10 CFR 50.73(a)(2)(i)(b) | 05000483/LER-2002-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000370/LER-2002-001 | | | 05000362/LER-2002-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000369/LER-2002-001 | | | 05000348/LER-2002-002 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000305/LER-2002-002 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i) | 05000368/LER-2002-002 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000440/LER-2002-002 | Failure of the High Pressure Core Spray Pump to Start | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000247/LER-2002-002 | | 10 CFR 50.73(a)(2)(i) | 05000346/LER-2002-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000331/LER-2002-002 | | 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000266/LER-2002-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000282/LER-2002-002 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000361/LER-2002-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000289/LER-2002-002 | | | 05000301/LER-2002-002 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000352/LER-2002-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000313/LER-2002-002 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000483/LER-2002-002 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000331/LER-2002-003 | | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000346/LER-2002-003 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000305/LER-2002-003 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition | 05000313/LER-2002-003 | | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000400/LER-2002-003 | Reactor Trip Due to Momentary Grid Undervoltage | | 05000454/LER-2002-003 | Two Automatic Reactor Trips Due to Reactor Coolant Overtemperature Conditions Caused by Digital Electrohydraulic Control System Circuit Card Failure Causing the Turbine Governor Valves To Close | | 05000348/LER-2002-003 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000397/LER-2002-003 | | | 05000247/LER-2002-003 | | 10 CFR 50.73(a)(2)(iv), System Actuation | 05000483/LER-2002-003 | 1 OF 4 | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000270/LER-2002-003 | | |
|