05000346/LER-1917-001, Regarding Emergency Diesel Generator Fuel Oil Storage Tank Vents Not Adequately Protected from Tornado-Generated Missiles
| ML17268A138 | |
| Person / Time | |
|---|---|
| Site: | Davis Besse  |
| Issue date: | 09/18/2017 |
| From: | Bezilla M FirstEnergy Nuclear Operating Co |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| L-17-252 LER 17-001-00 | |
| Download: ML17268A138 (5) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2) 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(ix)(A) 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) |
| 3461917001R00 - NRC Website | |
text
FE NOC' RrstEnergy Nuclear Operating Company 5501 North State Route 2 Oak Harbor. Ohio 43449 Mark B. Bezilla Vice President, Nuclear September 18, 2017 L-17-252 ATTN: Document Control Desk United States Nuclear Regulatory Commission Washington, D.C. 20555-0001
Subject:
Davis-Besse Nuclear Power Station, Unit 1 Docket Number 50-346, License Number NPF-3 Licensee Event Report 2017-001 419-321-7676 10 CFR 50.73 Enclosed is Licensee EventReport (LER) 2017-001-00, "Emergency Diesel Generator Fuel Oil Storage Tank Vents Not Adequately Protected from Tornado-Generated Missiles."
This event is being reported pursuant to 10 CFR 50. 73(a)(2)(i)(B), 10 CFR 50.73(a)(2)(ii)(B), 10 CFR 50.73(a)(2)(v}, and 10 CFR 50.73(a)(2)(vii).
There are no regulatory commitments contained in this letter or its enclosure. The actions described represent intended or planned actions and are described for information only. If there are any questions or if additional information is required, please contact Mr. Patrick J. McCloskey, Manager-Site Regulatory Compliance, at (419) 321-7274.
Sincerely,
~~
&Ja..,fir fl\\&~,Y/U_
Mark B. ~~;ll;Q GMW Enclosure: LER 2017-001 cc: NRG Region Ill Administrator NRG Resident Inspector NRR Project Manager Utility Radiological Safety Board
NRCFORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104 EXPIRES: 3/31/2020 (04-2017)
, the htt!,l://www.nrc.gov/reading-rm/doc-collections/nuregs/staff/sr1022/r3/
NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
3.PAGE Davis-Besse Nuclear Power Station, Unit 1 05000 346 1 OF 4
- 4. TITLE:
Emergency Diesel Generator Fuel Oil Storage Tank Vents Not Adequately Protected from Tornado-Generated Missiles
- 5. EVENT DATE
- 6. LER NUMBER.
- 7. REPORT DATE
- 8. OTHER FACILITIES INVOLVED I
SEQUENTIAL I REV FACILITY NAME DOCKET NUMBER MONTH DAY YEAR YEAR
. NUMBER NO.
MONTH DAY YEAR 05000 FACILITY NAME DOCKET NUMBER 07 20 2017 2017 -
001 -
00 09 18 2017 05000
- 9. OPERATING MODE
- 11. THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply)
D 20.2201 (b)
D 20.2203(a)(3)(i)
D 50. 73(a)(2)(ii)(A)
D 50.73(a)(2)(viii)(A) 1 D 20.2201 Cd>
D 20.2203(a)(3)(ii)
[gj 50.73(a)(2)(ii)(B)
D 50.73(a)(2)(viii)(B)
D 20.2203(a)(1)
D 20.2203Ca><4>
D 50.73(a)(2)(iii)
D 50.73(a)(2)(ix)(A)
D 20.2203(a)(2)(i)
D 50.36(c)(1)(i)(A)
D 50.73(a)(2)(iv)(A)
D 50.73(a)(2)(x)
- 10. POWER LEVEL D 20.2203(a)(2)(ii)
D 50.36(c)(1)(ii)(A)
~
50.73(a)(2)(v)(A)
D 73.71(a)(4)
D 20.2203(a)(2)(iii)
D 50.36(c)(2)
[gj 50. 73(a)(2)(v)(B)
D 73.71(a)(5)
D 20.2203(a)(2)(iv)
D 50.46(a)(3)(ii)
[gj 50. 73(a)(2)(v)(C)
D 73. nca>c1 >
100 D 20.2203(a)(2)(v)
D 50.73(a)(2)(i)(A)
[gj 50.73(a)(2)(v)(D)
D 73.77{a)(2)(i)
D 20.2203(a)(2)(vi)
~
50.73(a)(2)(i)(B)
[gj 50.73(a)(2)(vii)
D 73.77(a)(2)(ii)
D 50.73(a)(2)(i)(C)
D OTHER Specify in Abstract below or in
==CAUSE OF EVENT==YEAR 2017
- 3. LER NUMBER SEQUENTIAL NUMBER 001 REV NO.
00 was not missile protected or seismically qualified. The need for separate, redundant, seismic, and missile-protected fuel oil storage tanks to provide a seven-day fuel supply for each EDG was identified after initial plant construction had begun, but before the operating license had been issued. Design documents from original system design and construction state that.missile protection for the fuel oil storage tanks is provided by a mound of structural backfill covering both tanks. Although design drawings show the fuel oil storage tank vents penetrate the structural backfill, none of the documents reviewed consider the vents as potential missile targets or the effect of damaged vents on the operation of the tanks and EDGs.
A contributing cause to this event was that earlier compensatory measures proceduralized in procedure RA-EP-02810, Tornados or High Winds, were not properly vetted to ensure the EDGs would remain capable of performing their design function following a tornado. The potential for a fuel oil storage tank vent to be damaged during a tornado and challenge the EDG function was first identified in 2009. Compensatory actions were established to be performed after a tornado to ensure both fuel oil storage tanks had an adequate vent path even if the normal vents were damaged. Those compensatory actions were later incorporated in procedure RA-EP-02810 to direct operators to inspect vulnerable missile targets following a tornado strike and establish an alternate vent path if the normal vent is damaged. However, to prevent physical damage to the tanks and transfer pumps that could result from operation without adequate venting, one of the procedure steps used to establish an alternate vent requires locking out the associated transfer pump and declaring the affected EDG train inoperable. This action is not aligned with the Technical Specifications, which requires the fuel transfer system to operate as designed. Moreover, the procedure does not include steps to restore the system to service for operability. While these procedure steps would prevent additional damage to the fuel oil storage tank, they do not ensure the fuel oil storage and transfer system remains fully functional during and after a tornado.
ANALYSIS OF EVENT
The fuel oil and transfer system has level switches in the EDG Day Tanks that initiate automatic transfer of fuel oil from the fuel oil storage tanks to the Day Tanks. If the storage tank vent path were compromised with a complete crimp by a tornado-generated missile and automatic fuel transfer was initiated, the transfer pump would start to draw a vacuum in the tank. Reduced pressure in the tank could degrade or disable the ability of the transfer pump to deliver fuel to the Day Tank and the integrity of the storage tank could be challenged, which would impact the seven-day fuel supply for the affected train(s) of EDG. When full, each EDG Day Tank contains enough fuel to supply a fully-loaded EDG for about one and one-half hours before the transfer pumps would auto start to refill the Day Tank.
While tornadoes are rather common in Ohio, the probability of a tornado striking the station is very low. As discussed in EGM 15-002, the probability of a tornado missile striking a non-conforming component is very small. For a tornado missile to disable a fuel oil storage tank, the tornado would have to generate missiles that would strike the unprotected vent piping and crimp it in a way to completely isolate the vent path. If the vent piping were sheared off completely, the tank would remain vented. If the tank vent were completely crimped, time is available for the operators to restore the vent path before the transfer pump would automatically start. Therefore, as concluded in EGM 15-002, this issue is of low risk significance.
Reportability Discussion:
YEAR 2017
- 3. LER NUMBER SEQUENTIAL NUMBER 001 This issue resulted in both EDGs being declared inoperable in accordance with TS LCO 3.8.1. Therefore, this issue represented an unanalyzed condition that significantly degraded plant safety in accordance with 10 CFR 50.72(b)(3)(ii)(B), and an event or condition that could have prevented fulfillment of a safety function in accordance with 10 CFR 50.72(b)(3)(v). This issue was reported to the NRC Operations Center on July 20, 2017, at 1330 hours0.0154 days <br />0.369 hours <br />0.0022 weeks <br />5.06065e-4 months <br /> (Event Number 52865).
This issue is being reported in accordance with 10 CFR 50.73(a)(2)(ii)(B) as an unanalyzed condition that significantly degraded plant safety, and in accordance with 10 CFR 50.73(a)(2)(v) as a condition that could have prevented the fulfillment of the safety function of a system needed to: (A) shutdown the reactor and maintain it in a safe shutdown condition; (B) remove residual heat; (C) control the release of radioactive material; and (D) mitigate the consequences of an accident. This issue is also being reported in accordance with 10 CFR 50.73(a)(2)(vii) as an event where a single cause or condition caused two independent trains to become inoperable in a single system, and in accordance with 1 O CFR 50. 73(a)(2)(i)(B) as a condition prohibited by Technical Specifications.
CORRECTIVE ACTIONS
Completed Actions:
A standing order was issued as an immediate compensatory measure to satisfy the requirements of EGM 15-002. This compensatory measure directs the operators to existing plant procedures to secure the site if a tornado watch or warning is predicted or issued and to mitigate and recover from the effects of a tornado by establishing an alternate vent path for the fuel oil storage tanks.
Scheduled Actions:
A modification will be developed and implemented to ensure vents for each EDG fuel oil storage tank are adequately protected from tornado missiles.
Procedure RA-EP-02810, Tornados or High Winds, will be revised to ensure the EDGs can perform their design function following a tornado missile strike.
PREVIOUS SIMILAR EVENTS
REV NO.
00 There have been no Licensee Event Reports (LERs) at the DBNPS in the past three years related to actual or postulated tornado missiles. A previous issue with postulated tornado missiles was reported via LER 2002-006, but did not include any issues with the EDG fuel oil storage tanks or vents. The tornado that struck the DBNPS on June 24, 1998, was classified by the National Weather Service as an F2 (Fujita Scale) with winds ranging from 113 to 157 miles per hour. While the 1998 tornado resulted in a complete loss of offsite power, the EDGs were started prior to the loss of offsite power and supplied their respective essential loads until offsite power was restored (refer to DBNPS LER 98-006 for further information). Page 4 of 4