ML062860109
ML062860109 | |
Person / Time | |
---|---|
Site: | Cooper |
Issue date: | 07/15/2004 |
From: | NRC/OE |
To: | |
References | |
FOIA/PA-2006-0007, IR-04-014 | |
Download: ML062860109 (21) | |
Text
SERP Worksheet for SDP-Related Finding at Cooper Nuclear Station Service Water Gland -Seal Water Configuration Deficiency SERP Date: 7/15/04 Cornerstones Affected: Initiating Events and Mitigating Systems Proposed Preliminary Results: Greater than Green - Violation of 10 CFR 50, Appendix B, Criterion V, failure to prescribe appropriate instructions for the restoration service water following maintenance Licensee: Net ,raska Public Power District Facility/Location: Coc per Nuclear Station / Brownville, NE Docket No: 50-1298 License No: DPIR 46 Inspection Report No: 50-,298/2004-014 Special Date of Exit Meeting: JulI 22, 2004 Inspectors: Scc )tt Schwind; Steve Cochrum Branch Chief: Kris 1s Kennedy Meeting Members:
Issue Sponsor: Arthur T. Howell Technical Spokesperson: Michael D. Tschiltz Program Spokesperson: Stuart A. Richards OE Representative: James G. Luehman CONTENTS A. Brief Description of Issue ................................................ 2 B. Statement of Performance Deficiency ...................................... 2 C. Significance Determination Basis ......................................... 2
- 1. Reactor Inspection for IE, MS, B Cornerstones ......................... 2
- a. Phase I Screening Logic, Results and Assumptions ............. 2
- b. Phase 2 Risk Evaluation ..................................... 3
- c. Phase 3 Analysis .......................................... 4 Internal Initiating Events ..................................... 4 External Initiating Events .................................... 9 Potential Risk Contribution due to Large Early Release Frequency ... 12 Licensee's Risk Assessment ............ ................... 14 Sensitivity Studies ........................................ 15
- 2. All Other Inspection Findings (Not IE, MS, B Cornerstones) .............. 15 D. Proposed Enforcement ................................................ 15 E. Determination of Follow-up Review ....................................... 16 SERP Disposition Record .................................................... 17 SDP Phase 2 W orksheets ................................................... 18 Counting Rule W orksheet .................................................... 21 Informn Q 'Ik h Fe~d1?[* '* ed .................................................... 22 in accordance with the Freedom of Informatlow Act, exem ons F'"A" f,1-T, ,.,- 1 1"LI U1ROV IREC OEO0
2 A. Brief Description of Issue On January 21, 2004, the Division II service water discharge strainer was bypassed for routine maintenance (cleaning). In accordance with operating procedures, the gland water supply for the Division II pumps was cross-connected with the Division I pumps.
This is performed to prevent the introduction of large debris into the Division II pump glands. At that time, licensed operators declared the Division II service water subsystem to be inoperable because it was no longer independent from the other division as required. Following maintenance, the discharge strainer was returned to service, and the Division II service water subsystem was declared operable. However, operators restoring the system, failed to realign the gland water supply to the Division II pumps. Therefore, the interdependence between the two divisions remained.
On February 11, licensed operators were conducting a valve alignment verification because several spurious gland water low pressure annunciators had alarmed for Division 11pumps. The incorrect alignment was discovered as a result. Licensed operators appropriately declared Division II inoperable. The valves were realigned and the system was restored to an operable status.
B. Statement of Performance Deficiency The licensee failed to provide appropriate procedural guidance for the restoration of the Division II.service water pump gland water supply following maintenance and prior to returning the system to service. This configuration resulted in the Division II service water gland sealing system being provided by the Division I service water pumps. In this configuration, a failure of the Division I pumps would result in loss of gland water to the Division II pumps.
C. Significance Determination Basis
- 1. Phase 1 Screening Logic, Results and Assumptions In accordance with NRC Inspection Manual Chapter 0612, Appendix B, "Issue Screening," the inspectors determined that the failure to properly realign the system was a licensee performance deficiency because the system was returned to service in a condition that failed to meet the operability requirements of Technical Specification 3.7.2. This specification requires that both divisions of service water be operable. Additionally the failure to properly align the gland water system was fully within the licensee's abilities to control. The issue was more than minor because it affected the reliability of the service water system which provides the ultimate heat sink for the reactor during accident conditions.
The inspectors evaluated the issue using the SDP Phase 1 Screening Worksheet for the Initiating Events, Mitigating Systems, and Barriers Cornerstones provided in Manual Chapter 0609, Appendix A, "Significance Determination of Reactor Inspection Findings for At-Power Situations." This issue caused an increase in the likelihood of an initiating event, namely loss of service water, as well as increasing the probability that the service water system would not be available to perform its mitigating systems function. Therefore, the issue was passed to Phase 2.
O0 N:URE WI OUTAPP ATOR, QE
3
- 2. Phase 2 Estimation for Internal Events In accordance with Manual Chapter 0609, Appendix A, Attachment 1, "User Guidance for Significance Determination of Reactor Inspection Findings for At-Power Situations,"
the inspectors evaluated the subject finding using the Risk-Informed Inspection Notebook for Cooper Nuclear Station, Revision 1. The following assumptions were made:
The failure of gland water cooling to a service water pump will result in the failure
.of the pump to meet its risk-significant function.
The configuration of the service water system increased the likelihood that all service water would be lost.
The condition existed for 21 days. Therefore, the exposure time window used was 3 - 30 days.
The initiating event likelihood credit for loss of service water system was increased from five to four by the senior reactor analyst in accordance with Usage Rule 1.2 in Manual Chapter 0609, Appendix A, Attachment 2, "Site Specific Risk-Informed Inspection Notebook Usage Rules." This change reflects the fact that the finding increased the likelihood of a loss of service water, a normally cross-tied support system.
The configuration of the service water system did not increase the probability that the system function would be lost by an order of magnitude because both pumps in Division I would have to be lost before the condition would affect Division I1. Therefore, the order of magnitude assumption was that the service water system would continue to be a multi-train system.
- Because both divisions of service water continued to run and would have been available without an independent loss of Division I, this condition decreased the reliability of the system, but not the function. Therefore, sequences with loss of the service water mitigating function were not included in the analysis.
The last two assumptions are a deviation from the risk-informed notebook that was recommended by the Senior Reactor Analyst. This deviation represents a Phase 3 analysis in accordance with Manual Chapter 0609, Appendix A, Attachment 1, in the sectiorq entitled: "Phase 3 - Risk Significance Estimation Using Any Risk Basis That Departs from the Phase 1 or 2 Process."
Table 2 of the risk-informed notebook requires that all initiating event scenarios be evaluaied when a performance deficiency affects the service water system. However, given the assumption that the service water system function was not degraded, only the sequences with the special initiator for Loss of Service Water (TSW) and the sequences related to a Loss of A/C are applicable to this evaluation. The sequences from the notebdok are as follows:
0O
4 4
Initiating Event Sequence Mitigating Results
_Functions Loss of Service Water 1 RECSW24-LI 6 Loss of Service Water 2 RCIC-LI 6 Loss of Service Water 3 RCIC-HPCI 6 Using the counting rule worksheet, this finding was estimated to be YELLOW.
However, because several assumptions made during the Phase 2 process were overly conservative, a Phase 3 evaluation is required.
- 3. Phase 3 Analysis Internal Initiating Events Assumptions:
As stated above, the analyst modified the Phase 2 estimation by not including the sequences from initiating events other than a loss of service water. This change alone represents a Phase 3 analysis.
However, the results from the modified notebook estimation were compared with an evaluation developed using a Standardized Plant Analysis Risk (SPAR) model simulation of the cross tied service water divisions, as well as an assessment of the licensee's evaluation provided by the licensee's probabilistic risk assessment staff (Glen A. Seeman). The SPAR runs were based on the following analyst assumptions:
- a. The Cooper SPAR model was revised to better reflect the failure logic for the service water system. This model, including the component test and maintenance basic events, represents an appropriate tool for evaluation of the subject finding.
- b. NUREG/CR-5496, "Evaluation of Loss of Offsite Power Events at Nuclear Power Plants: 1980 - 1996," contains the NRC's current best estimate of both the likelihood of each of the loss of offsite power (LOOP) classes (i.e., plant-centered, grid related, and severe weather) and their recovery probabilities.
- c. The service water pumps at Cooper will fail to run if gland water is lost for 30 minutes or more. If gland water is recovered within 30 minutes of loss, the pumps will continue to run for their mission time, given their nominal failure rates.
- d. The condition existed for 21 days from January 25 through February 11, 2004 representing the exposure time.
- e. The nominal likelihood for a loss of service water, IELYTSW). at the Cooper Nuclear Station is as stated in NUREG/CR-5750, "Rates of Initiating Events at Nuclear OOONO FORDiSO WI THE ECT
5 Power Plants: 1987 - 1995," Section 4.4.8, "Loss of Safety-Related Cooling Water System." This reference documents a total loss of service water frequency at 9.72 x 10-4 per critical year.
- f. The nominal likelihood for a partial loss of service water, IEL(PTSW), at the Cooper Nuclear Station is as stated in NUREG/CR-5750, "Rates of Initiating Events at Nuclear Power Plants: 1987 - 1995," Section 4.4.8, "Loss of Safety-Related Cooling Water System." This reference documents a partial loss of service water frequency (loss of single division) at 8.92 x 10-3 per critical year.
- g. The configuration, of the service water system increased the likelihood that all service water would be lost. The increase in loss of service water initiating event likelihood best representing the change caused by this finding is one half the nominal likelihood for the loss of a single division. The analyst noted that the nominal value represents the likelihood that either division of service water is lost. However, for this finding, only losses of Division I equipment result in the loss of the other division.
- h. The SPAR HRA method used by Idaho National Engineering and Environmental Laboratories during the development of the SPAR models and published in Draft NUREG/CR-xxxxx, INEEL/EXT-02-10307, "SPAR-H Method," is an appropriate tool for evaluating the probability of operators recovering from a loss of Division I service water.
- i. The probability of operators failing to properly diagnose the need to restore Division II service water gland water upon a loss of Division I service water is 0.4.
This assumed the nominal diagnosis failure rate of 0.01 multiplied by the following performance shaping factors:
- Available Time: 10 The available time was barely adequate to complete the diagnosis. The analyst assumed that the diagnosis portion of this condition included all activities to identify the mispositioned valves. A licensee operator took 21 minutes to complete the steps. The analyst noted that this walk through was conducted in a vacuum. During a real incident, operators would have to prioritize many different annunciators. Additionally, operations personnel had been briefed on the finding at a time prior to the walk through, so they were more knowledgable of the potential problem than they would have been prior to the identification of the finding.
- Stress: 2 Stress under the conditions postulated would be high. Multiple alarms would be initiated including a loss of the Division I service water and the loss of gland water to Division I1. Additionally, assuming that indications of gland water failure were believed, the operators would understand that the consequences of their actions would represent a threat to plant safety.
- , Complexity: 2 ooON F c os ouTA OF DIRE 7OE0OO
6 The complexity of the tasks necessary to properly diagnose this condition was determined to be moderately complex. The analyst determined that there was some ambiguity in the diagnosis of this condition. The following factors were considered:
, Division I would be lost and may be prioritized above Division I1.
- The diagnosis takes place at both the main control room and the auxiliary panel in the service water structure and requires interaction between at least two operators.
- There have previously been alarms on gland water annunciators when swapping Divisions. Therefore, operators may hesitate to take action on Division II given problems with Division I.
N Previous heat exchanger clogging events may mislead the operators during their diagnosis.
Analysis:
Initiating Event Calc:
The analyst calculated the new initiating event likelihood, IEL(Tsw.ca,), as follows:
IEL(rSW.-ase) = IELIrrsw) + [ 2
9.72 x 10" + [0.5
- 8.92 x 10-]
5.43 x 10-3/ yr + 8760 hrs/yr 6.20 x 10 7/hr.
Evaluation of Change in Risk The SPAR Revision 3.03 model was modified to include updated loss of offsite power curves as published in NUREG CR-5496, as stated in Assumption b. The changes to the loss of offsite power recovery actions and other modifications to the SPAR model were documented in Table 2. In addition, the failure logic for the service water system was significantly changed as documented in Assumption a. These revisions were incorporated into a base case update, making the revised model the baseline for this evaluation. The resulting baseline core damage frequency, CDFbae, was 4.82 x 10.9 /hr.
The analyst changed this modified model to reflect that the failure of the Division I service water system would cause the failure of the gland water to Division I1. Division II was then modeled to fail either from independent divisional equipment failures, or from the failure of Division I. The analyst determined that the failure of Division II could be prevented by operator recovery action. As stated in Assumption **,the analyst assumed that this recovery action would fail 40 percent of the time. The model was requantified with the resulting current case conditional core damage frequency, CDFca, of 1.74 x 10.8 /hr.
The change in core damage frequency (ACDF) from the model was:
ACDF CDF*se - CDFbae
- 1.74x 10 8 -4.82x 10 9 =1.26x 10 8 /hr.
O(N F B UR IH PR L0E"IETR EO
7 Therefore, the total change in core damage frequency over the exposure time that was related to this finding was calculated as:
ACDF = 1.26 x 10*8 /hr
- 24 hr/day
- 21 days = 6.35 x 10.6 for 21 days The risk significance of this finding is presented in Table 3.a. The dominant cutsets from the internal risk model are shown in Table 3.b.
Table 2: Baseline Revisions to SPAR Model Basic Event Title Original Revised ACP-XHE-NOREC-30 Operator Fails to Recover AC .22 5.14 x 10"1 Power in 30 Minutes ACP-XHE-NOREC-4H Operator Fails to Recover AC .023 6.8 x 10.2 Power in 4 Hours ACP-XHE-NOREC-90 Operator Fails to Recover AC .061 2.35 x 10"'
Power in 90 Minutes ACP-XHE-NOREC-BD Operator Fails to Recover ACP .023 6.8 x 10.2 before Battery Depletion IE-LOOP Loss of Offsite Power Initiator 5.20 x 10 6/hr 5.32 x 10 6/hr EPS-DGN-FR-FTRE Diesel Generator Fails to Run - 0.5 hrs. 0.5 hrs.
Early Time Frame EPS-DGN-FR-FTRM Diesel Generator Fails to Run - 2.5 hrs. 13.5 hrs.
Middle Time Frame*
OEP-XHE-NOREC-10H Operator Fails to Recover AC 2.9 x 10.2 5.6 x 10.2 Power in 10 Hours OEP-XHE-NOREC-1 H Operator Fails to Recover AC 1.2 x 10"1 3.93 x 10-1 Power in 1 Hours OEP-XHE-NOREC-2H Operator Fails to Recover AC 6.4 x 10.2 2.49 x 10*'
Power in 2 Hours OEP-XHE-NOREC-4H Operator Fails to Recover AC 4.5 x 10-2 1.36 x 10' Power in 4 Hours
- Diesel Mission Time was increased from 2.5 to 14 hours1.62037e-4 days <br />0.00389 hours <br />2.314815e-5 weeks <br />5.327e-6 months <br /> in accordance with NUREG/CR-5496 000 T FO U DIS OSUREW UT APPR ALOF
8 Table 3.a: Evaluation Model Results Model Result Core Damage LERF Frequency SPAR 3.03, Baseline: Internal Risk 4.8 x 10 9/hr 4.4 x 10 9/hr Revised Internal Events Risk 1.7 x 10 8 /hr 1.7 x 10"8/hr TOTAL Internal Risk (ACDF) 6.4 x 10-6 6.3 x 10.6 Baseline: External Risk 7.9 x 10-11/hr 17.2 x 1011/hr External Events Risk 7.1 x 10"9/hr 16.5 x 10 9/hr TOTAL External Risk (ACDF) 3.6 x 10.6 3.2 x 10"6 TOTAL Internal and External 1.0 x 10"5 9.5 x 10' Change NOTE 1: The analyst assumed that the ratio of high and low pressure sequences were the same as for internal events baseline.
Table 3.b: Top Risk Cutsets Initiating Event Sequence Sequence Importance Number Loss of Offsite Power 39-04 EPS-VA3-AC4H 1.4 x 10.8 39-10 EPS-RCI-VA3-AC4H 7.6 x 10"10 39-14 EPS-RCI-HCI-AC30MIN 5.2 x 10.10.
39-24 EPS-SRVP2 3.2 x 10"10 39-22 EPS-SRVP1-RCI-VA3- 8.4 x 10"11 AC90MIN 7 SPC-SDC-CSS-CVS 5.4 x 10"11 36 RCI-HCI-DEP 4.7 x 10"11 6 SPC-SDC-CSS-VA1 4.6 x 10`11 39-23 EPS-SRVP1-RCI-HCI 2.7 x 10"11 Transient 62 SRV-P1-PCS-MFW-CDS- 6.0 x 10"10 LCS 63-05 PCS-SRVP1-SPC-CSS-VA1 2.9 x 10.10 64-11 PCS-SRVP2-LCS-LCI 1.0 x 10"'° 9 PCS-SPC-SDC-CSS-CR1- 3.7 x 10"11 VA1
4 9 63-06 PCS-SRVP1-SPC-CSS-CVS 63-32 PCS-SRVP1 -RCI-HCI-DE2 Loss of Service Water System 9 PC1 -SPC-SDC-CSS-CR1-I I _ _ IVA1 External Initiatinq Events:
In accordance with Manual Chapter 0609, Appendix A, Attachment 1, Step 2.5, "Screening for the Potential Risk Contribution Due to External Initiating Events," the analyst assessed the impact of external initiators because the Phase 2 SDP result provided a Risk Significance Estimation of 7 or greater.
Seismic, High Winds, Floods, and Other External Events:
The analyst determined, through plant walkdown, that the major divisional equipment associated with the service water system were on the same physical elevation as its redundant equipment in the alternate division. All four service water pumps are located in the same room at the same elevation. Both primary switchgear are at the same elevation and in adjacent rooms. Therefore, the likelihood that internal or external flooding and/or seismic events would affect one division without affecting the other was considered to be extremely low. Likewise, high wind events and transportation events were assumed to affect both divisions equally.
Fire:
The analyst evaluated the list of fire areas documented in the IPEEE, and concluded that the Division I service water system could fail in internal fires that did not directly affect Division 11equipment. These fires would constitute a change in risk associated with the finding. As presented in Table 4, the analyst identified two fire areas of concern: Pump room fires and a fire in Switchgear 1F. Given that all four service water pumps are located in one room, three different fire sizes were evaluated, namely: one pump fires, three pump fires, and four pump fires.
In the Individual Plant Examination for External Events Report - Cooper Nuclear Station, the licensee calculated the risk associated with fires in the service water pump room (Fire Area 20A). The related probabilities for these fires were as follows:
Parameter Variable Probability Fire Ignition Frequency LIFre 6.55 x 10"3/yr Conditional Probability of a Large Oil Spill PLarge spli 0.18 Conditional Probability of Fire less than 3 minutes PShort Fire 0.10 Conditional Probability of Unsuccessful Halon PHalon 0.05 Probability of Losing One Division I Pump in a One P 1.. 0.5 Pump Fire O005 y Pu CJ SURE HUA FTHE R&
, OE9~O
.4 A
10 Probability of Losing Both Division I Pumps in a Three P2.3 0.5 Pump Fire Probability of Losing One Division I Pump in a Three P 1.3 0.5 Pump Fire Conditional Probability of Losing the Running Division I P,,,- 1 0.5 Pump Given a Fire Damaging a Single Pump Failure to Run Likelihood for a Service Water Pump LFTR 3.0 x 1051/hr Failure to Start Probability per Demand for a Service PFTS 3.0 x 10.3 Water Pump As described in the IPEEE, the licensee determined that there were three different potential fire scenarios in the service water pump room, namely: a fire damaging one pump, caused by a small oil fire, a fire that results from the spill of all the oil from a single pump that damages three pumps; and fires that affect all four pumps. The licensee had determined that fires affecting only two pumps were not likely. The analyst determined that a four-pump fire was part of the baseline risk, therefore, it would not be evaluated. A one-pump fire would not automatically result in a plant transient.
However, the analyst assumed that a three-pump fire affecting both of the Division I pumps, would result in a loss of service water system initiating event.
The IPEEE stated that a single pump would be damaged in an oil fire that resulted from a small spill of oil, Lone Pump* The analyst, therefore, calculated the likelihood that a fire would damage a single pump as follows:
Lone Pump = LFIre * (1 - PLarge Spill)
= 6.55 x 10"3/yr +8760 hrs/yr * (1 - 0.18)
= 6.78 x 10"7/hr As in the IPEEE, the analyst assumed that all pumps would be damaged in an oil fire that resulted from a large spill of oil, that lasted for less than 3 minutes, if the halon system failed to actuate. It should be noted that the intensity of an oil fire is based on the availability of oxygen, and the fire is assumed to continue until all oil is consumed or it is extinguished. Therefore, the shorter the duration of the fire, the higher its intensity and the more likely it is to damage equipment in the pump room. Should the fire last for less than 3 minutes and the halon system successfully actuate, or if the fire lasted for longer than 3 minutes, the licensee determined that a single pump would survive the fire, LThre pumps, The analyst, therefore, calculated the likelihood that a fire would damage three pumps as follows:
LThree Pumps = [LFire
- PLarge Spill
- PShortFire * (1 - PHalon)] + [LFire
- PLarg* Spil * (1 - PShortFire)]
= [6.55 x 10"3/yr ÷8760 hrs/yr
- 0.18
- 0.10 * (1 - 0.05)]
+ [6.55 x 10-3/yr +8760 hrs/yr
- 0.18 * (1 - 0.10)]
= 1.34 x 10 7/hr 0007NOS Alt WýUýPý THDýT0 ýO
A
~- .~ .,
11 The likelihood of a single pump in Division 1 being damaged because of a fire, LDov1 Pump was calculated as follows:
LDI, Pump = (Lone Pump
- P 1-1) + (Lree Pumps
- P,-3 )
= (6.78 x 107/hr
- 0.5) + (1.34 x 107/hr
- 0.5)
= 4.06 x 10"7/hr The analyst assumed that a fire damaged pump would remain inoperable for the 30-day allowed-outage time. Therefore, the probability that the redundant Division I pump would start and run for 30 days, PA, fa,,, was calculated as follows:
'P*FaIs = PErs
- Prun-I + LFrR
= (3.0 x 10.3
- 0.5) + (3.0 x 105/hr
- 24 hrs/day *30 days)
= 1.5 x 10-3 + 2.16 x 10. 2
= 2.31 x 10.2 The likelihood of having a loss of all service water as a result of a one-pump fire, Lpump LOSWS, is then calculated as follows:
Lpump LOSWS = LDW, Pump
- PBAt Fails
= 4.06 x 107/hr
- 2.31 x 10.2
= 9.38 x 10 9/hr The likelihood of both pumps in Division 1 being damaged because of a fire, LDI Pumps was calculated as follows:
LDWi Pumps " LThree Pumps
- P2-3
= 1.34 x 10"7/hr
- 0.5
= 6.7 x 108/hr Given that a fire-induced loss of both Division I pumps results in a loss of service water system gland water, and the assumption was made that the gland water was unrecoverable during large fire scenarios, LDiv Pumps is equal to the likelihood of a loss of service water system initiating event.
The analyst used the revised baseline and current case SPAR models to quantify the conditional core damage probability for a fire that takes out both Division I pumps or one Division I pump with a failure of the second pump. A fire that affects both Division I pumps was assumed to cause an unrecoverable loss of service water initiating event.
The baseline conditional core damage probability was determined to be 1.99 x 10-8 . The current case probability was 6.63 x 10'". Therefore, the ACDP was 6.63 x 10-4.
ooo00 TLOF RCTOR 0
12 The analyst also assessed the affect of this finding on a postulated fire in Switchgear 1F. The analyst walked down the switchgear rooms and interviewed licensed operators. The analyst identified that, by procedure, a fire in Switchgear 1 F would require deenergization of the bus and subsequent manual scram of the plant.
Additionally, the analyst noted that no automatic fire suppression existed in the room.
Therefore, the analyst used the fire ignition frequency stated in the IPEEE, namely 3.70 x 103/yr (Lswftchgea,), as the frequency for loss of Switchgear 1F and a transient.
The analyst used the revised baseline and current case SPAR models to quantify the conditional core damage probabilities for a fire in Switchgear 1F. The resulting CCDPs were 1.88 x 10-4 (CCDPbase) for the baseline and 1.70 x 10.2 (CCDPcuTnt). The change in core damage frequency was calculated as follows:
ACDF = Lswitchgear * (CCDPurrent - CCDPbase)
= 3.70 x 10 3/yr - 8760 hrs/yr * (1.70 x 10.2 - 1.88 x 10-4)
= 7.10 x 10 9/hr Table 4: Internal Fire Risk Fire Areas: Fire Type Fire Ignition ACDP ACDF Frequency Switchgear 1F Shorts Bus 4.22 x 107/hr 1.68 x 10.2 7.10 x 10'9/hr Service Water Pump One Pump 9.38 x 10-9/hr 6.63 x 10-4 6.22 x 10-12/hr Room Room. Both Pumps 6.7 x 10 8/hr 6.63 x 10-4 4.44 x 10"1/hr Total ACDF for Fires affecting the Service Water System: 7.14 x 10*9/hr Exposure Time (21 days): 5.04 x 2 hrs External Events Change in Core Damage Frequency: 3.60 x 10.6 Potential Risk Contribution from Large Early Release Frequency (LERF):
In accordance with Manual Chapter 0609, Appendix A, Attachment 1, Step 2.6, "Screening for the Potential Risk Contribution Due to LERF," the analyst assessed the impact of large early release frequency because the Phase 2 SDP result provided a risk significance estimation of 7.
In BWR Mark I containments, only a subset of core damage accidents can lead to large, unmitigated releases from containment that have the potential to cause prompt fatalities prior to population evacuation. Core damage sequences of particular concern for Mark I containments are ISLOCA, ATWS, and Small LOCANTransient sequences involving high reactor coolant system pressure. A loss of service water is a special initiator for a transient. Step 2.6 of Manual Chapter 0609 requires a LERF evaluation for all reactor types if the risk significance estimation is 7 or less and transient sequences are involved.
00 .Q C OSUR OU
13 In accordance with Manual Chapter 0609, Appendix H, "Containment Integrity SDP," the analyst determined that this was a Type A finding, because the finding affected the plant core damage frequency. The analyst evaluated both the baseline model and the current case model to determine the LERF potential sequences and segregate them into the categories provided in Appendix H, Table 5.2 "Phase 2 Assessment Factors - Type A Following each model run, the analyst segregated the core damage sequences as follows:
Loss of coolant accidents were assumed to result in a wet drywell floor. The analyst assumed that during all station blackout initiating events the dryweil floor remained dry. The Cooper Nuclear emergency operating procedures require drywell flooding if reactor vessel level can not be restored. Therefore, the analysts assumed that containment flooding was successful for all high pressure transients and those low pressure transients that had the residual heat removal system available.
All Event V initiators were grouped as intersystem loss of coolant accidents (ISLOCA)
Transient Sequence 65, Loss of dc Sequence 62, Loss of service water system Sequence 71, small loss of coolant accident Sequence 41, medium loss of coolant accident Sequence 32, large loss of coolant accident Sequence 12, and LOOP Sequence 40 cutsets were considered anticipated transients without scram (ATWS)
All LOOP Sequence 39 cutsets were considered Station Blackouts. Those with success of safety-relief valves to close or a single stuck-open relief valve were considered high pressure sequences. Those with more than one stuck-open relief valve were considered low pressure sequehces.
Transients that did not result in anATWS were assumed to be low pressure sequences if the cutsets included low pressure injection, core spray, or more than one stuck-open relief valve. Otherwise, the analyst assumed that the sequences were high pressure.
Small break loss of coolant accident, Sequence 1 cutsets, that represent stuck-open relief valves and other recoverable incidents, were assumed to result in a dry floor. All other cutsets were assumed to provide a wetted drywell floor.
000Ný 7 PLI "C LOS OtWUQPPROýV ýEDIi CT I,E
I 14 Licensee's Risk Assessment:
The licensee performed an assessment of the risk from this finding as documented in Engineering Study PSA-ES062, "Risk Significance of SCR 2004-0077, Service Water Gland Water Valve Mis-positioning Event." The licensee's result for internal risk was a ACDF of 3.85 x 10-. The analyst reviewed the licensee's assumptions and determined that the following differences dominated the difference between the licensee's and the analyst's assessments:
- 1. The licensee used a Human Error Probability of 9.2 x 10'2 for the probability that operators would fail to realign gland water prior to failure of the Division II pumps.
OOONO ORPU "IEGOO0
15 The analyst .determined that this assumption was responsible for about 30% of the difference in the final results.
- 2. The licensee's model uses a Loss of Offsite power frequency of 1.74 x 10 8/hr as opposed the the NUREG/CR-5496 value of 5.32 x 10"6/hr.
The analyst determined that this assumption was responsible for the vast majority of the difference in the final results. The analyst noted that the majority of risk was from core damage sequences that were initiated by a loss of offsite power.
S
- 2. All Other Inspection Findings (Not IE, MS, B Cornerstones)
Not Applicable.
D. Proposed Enforcement
- 1. Regulatory Requirement Not Met 10 CFR 50, Appendix B, Criterion V requires that activities affecting quality to be prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances.
- 2. Proposed Citation Criterion V of 10 CFR 50, Apendix B requires that activities affecting quality shall be prescribed by documented instructions, procedures or drawings, of a type appropriate to the circumstances and shall be accomplished in accordance with these instructions, procedures, or drawings.
0S"
16 Contrary to the above, on January 21, 2004, Division 2 of the service water system was declared operable following routine maintenance using instructions contained in Clearance Order SWB-1-4324147 SW-STNR-B to restore the system to its normal configuration. These instructions did not direct restoration of the. Division 2 gland water supply to a normal alignment which remained cross-connected with the Division 1 gland water supply for approximately 21 days. On February 11, 2004, the misalignment was discovered while investigating the cause of a low pressure alarm on the gland water system. This misalignment resulted in the loss of redundancy in the service water system.
- 3. Historical Precedent E. Determination of Follow-up Review.
OE should review final determination letter before issuance.
00NTPýPýýCý EýUTARLQ ý EN\E9-,ý
Attachment 1 SERP Disposition Record Licensee/Facility: Nebraska Public Power District / Cooper Nuclear Generating Station EA No:
Panel Date: /04 Issue: Failure to Properly Align Service Water System Gland Water Supply ATTENDEES:
Chair: Branch Chief: Enf. Reps.: O Rep.:
Counsel: Others:
HO Reps:
Required Actions (Preliminary Proposed Actions - See OE Strategy Form for official record of panel decision.)
- 1. Issue choice letter to the licensee for a preliminary Yellow finding Responsible Person: ECD:
- 2. Schedule regulatory conference if requested.
Responsible Person: ECD:
- 3. Prepare and issue final significance determination letter Responsible Person: ECD:
4.
Responsible Person: ECD:
OOON PW A
4 19 000TN6 F'OR PBLIC DIS OUREW OUTPAPPRGVAL-OF Tf E DIRECTOR,-OEO 0
.' ~,. 21 Stepl 11'instructions (1) (1) 0-0'
- (2) DWWdt6ihsbieiit bf.St&Op (1) by 3 arfdf~b'iih ddwirC2 (2I_.)
- 0
(.3) Enerth nmbr of equenpces_ wiqars inf~~ ua tib8.
- 14) Add the r~e-s'u~lt 6f Ofe'p '(3)t h ries'6lt bf6te(2).
DMd-e'jthe'-r-'-bIt'of ~f6`(4_ yti 3 'rd- h-dWdo-n
_(4)
(53) 0*)
Enerlte numb'er of .sequences witha risk sighificancbeqal to67.'
(8)
(9)
(0) Add~~~~~
'ft esult h ~l~'f~
(9li of Step',9(t 8),
(i5)___. j_
312) Ent~~ ~~~~~_Wt nube ofsqene ii a~ skignificance equal o5 (1.3)
(15) (16) ~.1; ile mbeancesequncest Erik~r s_ 0 (16) Add tK6i~ie~it o6f Si6p .M5)to the fe~jsuj `f _St6b ý(14)
If th6ii!ielftof Ste--i 16i gP safe-ty than e;th i'rie*-ksrgfica'n- c' of {fh6ibbectioh fin'ding:is of high significance (RED):
if ifi6:i~sult'of Step 13 is grea6~itertaf ais'p'66icthhh' eo hnter~ i i~~ fiHhdi4 ist ea o ustarntial s-afety'significan'ce'(YELLOW)L iftii~resi~it of ~Stdp'10~ grFeater~than Ze'ro j-t eh enks ifican6i6nsbto fi~iii at least"of iow'to moderate safeiy significrnce (WHITE).,
- If the result of.Steps 10,13,and '16arezero, 'then the r sk sigificance of the ispection. indig is of very Ioav *fety'significance (GREEN).
Phase-2 FRe's-Jlt: 0lff GREEN / WHITE b YELLoW 'f0' RED Table-6;- CUntling Ru'le Workshbee Issue Date: 03/18/02 A2-21 6609, App A, Att 2
DRAFT NOTICE OF VIOLATION Nebraska Public Power District Docket No. 50-298 Cooper Nuclear Station License No. DPR-46 EA-04-XXX During an NRC inspection conducted on March 25 through July 10, 2004 a violation of NRC requirements was identified. In accordance with the "General Statement of Policy and Procedure for NRC Enforcement Actions," NUREG-1 600, the violation is listed below:
Pursuant to the provisions of 10 CFR 2.201, Nebraska Public Power District is hereby required to submit a written statement or explanation to the U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, DC 20555 with a copy to the Regional Administrator, Region 4, and a copy to the NRC Resident Inspector at the facility that is the subject of this Notice, within 30 days of the date of the letter transmitting this Notice of Violation (Notice). This reply should be clearly marked as a "Reply to a Notice of Violation; EA-04-XXX" and should include for each violation: (1) the reason for the violation, or, if contested, the basis for disputing the violation or severity level, (2) the corrective steps that have been taken and the results achieved, (3) the corrective steps that will be taken to avoid further violations, and (4) the date when full compliance will be achieved. Your response may reference or include previous docketed correspondence, if the correspondence adequately addresses the required response. If an adequate reply is not received within the time specified in this Notice, an order or a Demand for Information may be issued as to why the license should not be modified, suspended, or revoked, or why such other action as may be proper should not be taken.
Where good cause is shown, consideration will be given to extending the response time.
If you contest this enforcement action, you should also provide a copy of your response, with the basis for your denial, to the Director, Office of Enforcement, United States Nuclear Regulatory Commission, Washington, DC 20555-0001.
Because your response will be made available electronically for public inspection in the NRC Public Document Room or from the NRC's document system (ADAMS), accessible from the NRC Web site at httD//www.nrc.oov/readina-rm/adams.html, to the extent possible, it should not include any personal privacy, proprietary, or safeguards information so that it can be made available to the public without redaction. If personal privacy or proprietary information is necessary to provide an acceptable response, then please provide a bracketed copy of your
response that identifies the information that should be protected and a redacted copy of your response that deletes such information. If you request withholding of such material, you must specifically identify the portions of your response that you seek to have withheld detail the bases for your claim of withholding (e.g., explain why the disclosure and provide in create an unwarranted invasion of personal privacy or provide the information of information will required by 10 CFR 2.390(b) to support a request for withholding confidential commercial or financial information). If safeguards information is necessary to provide an acceptable response, please provide the level of protection described in 10 CFR 73.21.
Dated this - day of - 2004