05000250/LER-2008-001

From kanterella
Jump to navigation Jump to search
LER-2008-001, Human Error Causes Grid Disturbance Resulting in a Dual Unit Trip
Turkey Point Unit 3
Event date: 2-26-2008
Report date: 4-25-2008
Reporting criterion: 10 CFR 50.73(a)(2)(iv)(A), System Actuation
2502008001R00 - NRC Website

FACILITY NAME (1) DOCKET NUMBER (2) LER NUMBER (6) PAGE (3) Turkey Point Unit 3 05000250

NUMBER

— — NARRATIVE

DESCRIPTION OF THE EVENT

On February 26, 2008 at approximately 1309 hours0.0152 days <br />0.364 hours <br />0.00216 weeks <br />4.980745e-4 months <br />, a momentary grid voltage disturbance occurred that caused a reactor [EIIS: AC, RCT] trip of both Turkey Point Units 3 and 4 from 100% power. Each reactor tripped when both channels of safety-related 4 KV bus [EIIS: EA, SWGR, BU] (3A, 3B for Unit 3 and 4A, 4B for Unit 4) undervoltage relays [EIIS: JC, RLY, 27] actuated after a one second time delay. Protection against a momentary grid disturbance is a feature of Turkey Point's electrical system; however, the duration of the condition exceeded the time delay resulting in the actuation of the 4 KV bus undervoltage relays.

4B steam generator feed pump (SGFP) [EIIS: SJ, P] tripped on the loss of power from the 4C 4 KV bus.

Auxiliary feedwater (AFW) pumps [EIIS: BA, P] automatically started on both units when steam generator narrow range levels dropped below 10%, as expected.

Operator action occurred appropriately and as directed by Emergency Operating Procedures (EOP).

Operators verified the reactor and turbine [EIIS: TA, TRB] trips [EIIS: IT], and that safety injection signals had not occurred nor were required.

Except for the 4C 4 KV bus, offsite electrical power remained available to implement the EOP mitigation strategy. The 4C 4 KV bus was reenergized approximately one hour after the Unit 4 reactor trip.

According to procedure, operators verified equipment status. Safeguards equipment responded as expected to mitigate the event. Operators did not have to manually start equipment. The emergency diesel generators [EIIS: EK, DG] did not auto start since the momentary voltage drop ended during the time switchyard breakers [EIIS: EA, BKR] repositioned to place the startup transformers [EIIS: EB, XFMR] in service. The safety-related 4 KV buses remained energized. The reactor coolant pumps [EIIS: AB, P] remained in service. Operators stabilized both units in Mode 3.

At approximately 1620, while shutting down the Unit 4 4A. SGFP after transferring to standby feedwater, AFW automatically actuated due to a red flag semaphore [EIIS: BA, XI] still present on the 4B SGFP control switch [EIIS: SJ, P, HS] since the switch had not been taken to the stop position. This condition existed due to the prior loss of the 4C 4 KV bus. The loss of the 4C 4 KV bus caused a loss of the 4B SGFP. When the bus was restored, the semaphore for the 4B SGFP was still red. Manual action is required to green flag this semaphore. When the 4A SGFP switch was taken to stop, AFW actuation logic was satisfied by the 4B SGFP switch contacts associated with the semaphore red flag. This AFW actuation was inadvertent.

The reactor trips, initial AFW actuations and inadvertent AFW actuation on Unit 4 were reported to the NRC Operations Center in accordance with 10 CFR 50.72(b)(2)(iv)(B) and 10 CFR 50.72(b)(3)(iv)(A), respectively. The Event Notification number is 44009. Condition Reports 2008-6703, 2008-6689, 2008- 6900, 2008-6697 and 2008-6680, among others, were initiated in response to the plant trips and inadvertent AFW initiation.

FACILITY NAME (1)

DOCKET

2008 - 001 -

CAUSE OF THE EVENT

The grid voltage disturbance occurred due to human error when a Protection and Control (P&C) field engineer disabled both levels of local protection at an electrical substation which then failed to actuate when a fault occurred during equipment troubleshooting. The inadvertent AFW actuation occurred due to inadequate procedural guidance.

ANALYSIS OF THE EVENT

Grid Disturbance On February 26, 2008, a Protection and Control (P&C) field engineer was diagnosing a switch that had malfunctioned at FPL's Flagami substation in west Miami. At approximately 1309 during the diagnostic process, a fault occurred. The engineer had disabled both levels of local protection, contrary to FPL's standard procedures and established practices. When the switch was operated, an arc developed which, aided by windy weather, evolved into a three phase fault. Because both levels of local protection were disabled, the fault was cleared remotely resulting in delayed clearing (1.7 seconds).

Inadvertent AFW Actuation Human performance and procedure reviews were conducted. None of the procedures prompted looking at the semaphore flag for the shutdown 4B SGFP. The operator was using all required human performance tools and obtained a peer check. A brief was conducted with the field operators but not the other control room operators.

The causal factor for this event was primarily written communication. The procedures do not contain any steps, precautions, limitations, or notes that would direct or suggest matching the semaphore. The only line of defense in this case was operator knowledge and awareness. However, a brief including other experienced staff may have recognized the hazard. Therefore, inadequate communication is a secondary causal factor.

Reportability 10 CFR 50.73(a)(2)(iv)(A) requires a written report of valid actuations of the reactor protection system and a pressurized water reactor's auxiliary or emergency feedwater system. Since reactor trips, and expected and inadvertent actuations of the AFW system occurred during the response to the reactor trips, these events are being reported herein.

DOCKET

2008 - 001 -

ANALYSIS OF SAFETY SIGNIFICANCE

The plant response to the grid voltage disturbance was as designed with only one minor complication, the loss of the 4C 4 KV bus. Offsite power remained available to the safety buses and the reactor coolant pumps did not trip. At the time of the inadvertent AFW actuation on Unit 4, the standby feed pumps had been put in service. AFW was not required to mitigate any plant condition at that time. Therefore, the safety significance of the plant trips and AFW actuation are minimal.

CORRECTIVE ACTIONS

Grid Disturbance

  • Corrective actions include: A procedure requiring approved plans for disabling any relay protection, independent verification, more stringent requirements in switching procedures, and training for P&C field engineers and dispatchers on the new procedures.

Inadvertent AFW Actuation

  • Applicable procedures will be revised to ensure the control switches for various components powered by the 4C 4 KV bus are placed in the appropriate position after a loss of power and to verify the control board switches are green flagged.

ADDITIONAL INFORMATION

second component function identifier (if appropriate)].

FAILED COMPONENTS IDENTIFIED: None PREVIOUS SIMILAR EVENTS: None