11-30-2005 | On October 2, 2005 at 0825 (discovery date) Containment Emergency Cooling Unit Train "A", 3ME399, did not start during its monthly surveillance test. SCE discovered 3BLP0303, Containment Emergency Fan 3ME399 Backup Breaker had tripped open.
SCE's review determined this breaker (and also breaker 3BLP0304 for Train "A" ECU 3ME401) had been installed with incorrect setpoint tolerances. Because SCE installed these breakers during the last refueling, ECUs 3ME399 and 3ME401 were considered inoperable from December 23, 2004 to October 5, 2005. SCE is submitting this report in accordance with 10CFR50.73(a)(2)(i)(B) and 10CFR50.73(a)(2)(v)(D).
This event was initiated by incorrect field implementation of an engineered change package. This condition went undetected after the September 4, 2005 surveillance because the surveillance procedure did not provide sufficient instruction to determine that 3BLP0303 tripped during the surveillance. SCE corrected the breaker setpoint tolerances, and improved the ECU surveillance procedure.
Since redundant Containment Cooling systems remained available and operable throughout the duration of this occurrence, the safety significance of this event is low. |
---|
_� 2005 —002 — 00 Plant:� San Onofre Nuclear Generating Station (SONGS) Event Date:� December 23, 2004 Discovery Date:� October 2, 2005 Reactor Vendor:� Combustion Engineering Mode:� Mode 1 — Power Operation Power:� 100 percent
Description of Event
On October 2, 2005 at 0825 (discovery date) Containment Emergency Cooling Unit (ECU) Train "A", 3ME399, did not start during its monthly surveillance test. Plant operators determined that 3BLP0303, Containment Emergency Fan 3ME399 Backup Breaker, was open (tripped). Backup breaker 3BLP0303 is normally closed.
Since the ECUs are located inside containment, the monthly surveillance is conducted by plant operators in the control room monitoring the fan motor starting current. During the last surveillance test of 3ME399 on September 4, 2005, the motor starting current was observed by plant operators. The operators recorded the surveillance as completed satisfactorily, but the breaker 3BLP0303 had tripped open after the starting current was observed.
SCE had replaced backup breakers 3BLP0303 and 3BLP0304 (breaker to fan on ECU 3ME401) during the Unit 3 cycle 13 refueling outage and returned to service on December 23, 2004. SCE's review determined that the breakers had been installed with incorrect setpoint tolerances. ECU 3ME399 had successfully passed its monthly surveillances since 3BLP0303 was installed in December 2004, until it tripped on September 4, 2005. ECU 3ME401 had successfully passed its monthly surveillances since 3BLP0304 was installed in December (3BLP0304 did not trip).
SCE's evaluation concluded that both 3BLP0303 and 3BLP0304, while functional, would not be able to fulfill their design function due to the incorrect setpoint tolerances.
Consequently, ECUs 3ME399 and 3ME401 were considered inoperable from December 23, 2004 to October 5, 2005 (when the breakers were replaced and returned to operable status). Both ECUs are in Train "A".
Technical Specifications (TS) 3.6.6.1, Containment Spray and Cooling Systems, requires two trains of containment cooling to be operable while the plant is in Modes 1, 2, and 3.
With one train of containment cooling inoperable, TS 3.6.6.1 Action C requires the containment cooling train be restored to operable status in 7 days. Train "A" of containment cooling was inoperable from December 23, 2004 through October 5, 2005 (greater than 7 days).
If two containment cooling trains are inoperable, TS 3.6.61, Action D requires one train to be restored to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. If Action D is not completed, Action F requires the plant to be placed in Mode 3 within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.
The Emergency Diesel Generators (EDGs) provide AC power to provide containment cooling under loss of offsite power conditions. TS 3.8.1, Electrical Power Systems, AC Sources, requires two EDGs to be operable in Modes 1 — 4. If one EDG is inoperable, Action B.2 states that a required feature supported by the inoperable EDG must be declared inoperable when its redundant required feature is also inoperable. This action is required to be completed within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> of discovery.
Between December 23, 2004 and October 5, 2005, SCE periodically removed the Train "B" EDGs from service. One instance was the 12-year overhaul of the Train "B" EDG, which removed the EDGs from service for about eight days (August 21-29, 2005). During the overhaul, TS 3.8.1, Action B.2 would have required SCE to declare the Train "B" ECUs inoperable within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> of declaring the Train "B" EDG inoperable and TS 3.6.6.1, Action F, would have required a plant shutdown 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> later. Because plant operators were unaware the incorrect breaker setpoint tolerances were installed and the Train "A" ECUs should have been considered inoperable, these actions were not completed.
SCE is reporting the conditions prohibited by TS 3.6.6.1 and TS 3.8.1 in accordance with 10CFR50.73(a)(2)(i)(B).
As noted above, there were times when Train "A" ECU was inoperable at the same time that Train "B" ECU was required by TS 3.8.1 to be considered inoperable. Consequently, even though Train "B" ECU remained functional (normal power was available), SCE is electing to report this occurrence in accordance with 10 CFR 50.73(a)(2)(v)(D), as a loss of safety function.
Cause of Event
During cycle 13 refueling outage, SCE replaced 3BLP0303 and 3BLP0304, Containment Emergency Fan 3ME399 and Fan 3ME401 backup breakers. The replacement breakers required a non-typical setpoint tolerance (-0 percent, +25 percent); however, 3BLP0303 and 3BLP0304 were installed with a SONGS standard setpoint tolerance (nominally +/-25 percent), which was incorrect. The non-typical setpoint tolerance were correctly identified in the engineering change package for the replacement breakers, but the information was not adequately implemented in the planning process and during field installation.
During the September 4, 2005, monthly surveillance, breaker 3BLP0303 tripped due to normal variation of the motor in-rush starting current. The tripped breaker went undetected after the surveillance because the procedure did not provide sufficient instruction to determine if the backup breaker had tripped during the surveillance. The condition of the tripped breaker 3BLP0303 was not discovered until October 2, 2005, during the subsequent monthly surveillance. SCE's review also concluded that backup breaker 3BLP0304 had not tripped between the time it was installed to the date 3BLP0303 was discovered tripped open.
Corrective Actions
1. SCE installed a new breaker tested to the correct setpoint tolerances in position 3BLP0303 and returned the breaker to operable status on October 5, 2005.
Breaker 3BLP0304 was replaced with a new breaker and tested to the correct setpoint tolerances and returned to operable status on October 5, 2005.
2. The surveillance procedure was revised to trend bus to load amps and outlet ECU temperature to determine ECU fan starts and operates continuously through the duration of the surveillance testing. In the past, only indication of motor starting in rush current was used to determine ECU operability during surveillance testing.
SCE will review this surveillance issue with plant operators.
3. SCE revised procedures to ensure engineering changes affecting setpoint tolerances in plant equipment are identified and implemented in the field.
Additional corrective actions may be implemented as they are identified.
Extent of Condition Breakers 3BLP0303 and 3BLP0304 were two of eight backup penetration breakers (four in Unit 2, four in Unit 3) identified for replacement because they were obsolete equipment.
Only these eight breakers specify the non-typical setpoint tolerance of —0 percent, +25 percent. To date, 3BLP0303 and 3BLP0304 had been replaced. Consequently, no other plant systems were affected because the remaining six breakers had not been installed.
SCE's review also concluded that 3BLP0304 had not tripped between the time it was installed to the date 3BLP0303 was discovered tripped open.
Safety Significance
SONGS has two trains of emergency containment cooling systems. Each train has a containment spray pump and two containment emergency coolers.
Thus, there are six individual components between Train "A" and Train "B" that can provide post accident containment cooling as follows:
Train "A" Train "B" 1)Containment Spray Pump P012 4) Containment Spray Pump P013 2) Emergency Cooler E399 5) Emergency Cooler E400 3) Emergency Cooler E401 6) Emergency Cooler E402 A probabilistic risk analysis showed the incremental core damage probability (ICDP) and incremental large, early release probability (ILERP) risk due to the inoperability of 3ME399 and 3ME401 was less than 1E-8 for ICDP and less than 1E-9 for ILERP. This analysis was based on actual component unavailability and plant operations from December 23, 2004 through October 5, 2005. Although Containment Cooling Train B was considered TS inoperable, normal power to the components remained available to perform its required safety function throughout the duration of this event.
For these reasons, SCE concludes this event was of low safety significance.
Additional Information
In the past three years, SCE submitted one LER (Unit 3 2002-002-00) for containment cooling being inoperable for longer than allowed by TS. That event was the result of a manufacturing defect which prevented a breaker from fully charging through the end of the charge cycle. That failure mode was discussed in a May 6, 2002, 10CFR21 report from Asea Brown Boveri to the NRC. Because the incorrect setpoint tolerances reported in this LER were not related to a defective breaker, corrective action taken for LER 2002-002-00 could not have prevented this event.
In the past three years, SCE has not reported any events caused by an inadequate procedure that allowed inoperable equipment to be declared operable.
|
---|
|
|
| | Reporting criterion |
---|
05000328/LER-2005-001 | Unit 2 Reactor Trip Following Closure of Main Feedwater Upon Inadvertent Opening of Control Breakers | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000388/LER-2005-001 | DDegradation of Primary Coolant Pressure Boundary due to Recirculation Pump Discharge Valve Bonnet Vent Connection Weld Flaw | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000423/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000455/LER-2005-001 | Unit 2 Automatic Reactor Trip Due to Low Steam Generator Level resulting from a Software Fault on the Turbine Control Power Runback Feature | | 05000370/LER-2005-001 | Automatic Actuation of Motor Driven Auxiliary Feedwater Pumps During Outage | | 05000244/LER-2005-001 | Failure of ADFCS Power Supplies Results in Plant Trip | | 05000247/LER-2005-001 | 0Technical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by an Inoperable Auxiliary Component Cooling Water Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000529/LER-2005-001 | REACTOR HEAD VENT AXIAL INDICATIONS CAUSED BY DEGRADED ALLOY 600 COMPONENT | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000336/LER-2005-001 | | | 05000266/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000269/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000289/LER-2005-001 | | | 05000293/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000298/LER-2005-001 | Reactor Scram due to Reactor Level Transient and Inadvertent Rendering of High Pressure Coolant Injection Inoperable | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000331/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000315/LER-2005-001 | Reactor Trip Following Intermediate Range High Flux Signal | | 05000316/LER-2005-001 | Reactor Trip from RCP Bus Undervoltage Signal Complicated by Diesel Generator Output Breaker Failure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000317/LER-2005-001 | Main Feedwater Isolation Valve Inoperability Due to Handswitch Wiring | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000323/LER-2005-001 | TS 3.4.10 Not Met During Pressurizer Safety Valve Surveillance Testing Due to Random Lift Spread | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000333/LER-2005-001 | Inoperable Offsite Circuit In Excess of Technical Specifications Allowed Out of Service Time | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000352/LER-2005-001 | Loss Of Licensed Material In The Form Of A Radiation Detector Calibration Source | | 05000353/LER-2005-001 | Core Alterations Performed With Source Range Monitor Alarm Horn Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-001 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000362/LER-2005-001 | Emergency Diesel Generator (EDG) 3G003 Declared Inoperable Due to Loose Wiring Connection on Emergency Supply Fan | | 05000263/LER-2005-001 | | | 05000456/LER-2005-001 | Potential Technical Specification (TS) 3.9.4 Violation Due to Imprecise Original TS and TS Bases Wording | | 05000454/LER-2005-001 | Failed Technical Specification Ventilation Surveillance Requirements During Surveillance Requirement 3.0.3 Delay Period | | 05000282/LER-2005-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000286/LER-2005-001 | Plant in a Condition Prohibited by Technical Specifications due to Error Making Control Room Ventilation System Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000400/LER-2005-001 | Reactor Auxiliary Building Emergency Exhaust System Single Failure Vulnerability | | 05000395/LER-2005-001 | Emergency Diesel Generator Start and Load Due To A Loss Of Vital Bus | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000382/LER-2005-001 | RCS Pressure Boundary Leakage Due to Primary Water Stress Corrosion Cracking of a Pressurizer Heater Sleeve | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000305/LER-2005-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000369/LER-2005-001 | Reactor Coolant System Leakage Detection Instrumentation Inoperable | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000266/LER-2005-002 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000255/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000361/LER-2005-002 | Missing Taper Pins on CCW Valve Cause Technical Specification Required Shutdown | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000370/LER-2005-002 | Ice Condenser Lower Inlet Door Failed Surveillance Testing | | 05000353/LER-2005-002 | High Pressure Coolant Injection System Inoperable due to a Degraded Control Power Fuse Clip | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | 05000263/LER-2005-002 | | | 05000454/LER-2005-002 | One of Two Trains of Hydrogen Recombiners Inoperable Longer Than Allowed by Technical Specifications Due to Inadequate Procedure | | 05000244/LER-2005-002 | Emergency Diesel Generator Start Resulting From Loss of Off-Site Power Circuit 751 | | 05000362/LER-2005-002 | Emergency Containment Cooling Inoperable for Longer than Allowed by Technical Specifications | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000247/LER-2005-002 | DTechnical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for One Inoperable Train of ECCS Caused by Gas Intrusion from a Leaking Check Valve | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000306/LER-2005-002 | | 10 CFR 50.73(a)(2)(v)(C), Loss of Safety Function - Release of Radioactive Material 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000265/LER-2005-002 | Main Steam Relief Valve Actuator Degradation Due to Failure to Correct Vibration Levels Exceeding Equipment Design Capacities | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000286/LER-2005-002 | • Entergy Nuclear Northeast Indian Point Energy Center 450 Broadway, GSB P.O. Box 249Entergy Buchanan. NY 10511-0249 Tel 914 734 6700 Fred Dacimo Site Vice President Administration July 5, 2005 Indian Point Unit No. 3 Docket Nos. 50-286 N L-05-078 Document Control Desk U.S. Nuclear Regulatory Commission Mail Stop O-P1-17 Washington, DC 20555-0001 Subject:L Licensee Event Report # 2005-002-00, "Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure." Dear Sir: The attached Licensee Event Report (LER) 2005-002-00 is the follow-up written report submitted in accordance with 10 CFR 50.73. This event is of the type defined in 10 CFR 50.73(a)(2)(iv)(A) for an event recorded in the Entergy corrective action process as Condition Report CR-IP3-2005-02478. There are no commitments contained in this letter. Should you or your staff have any questions regarding this matter, please contact Mr. Patric W. Conroy, Manager, Licensing, Indian Point Energy Center at (914) 734-6668. Sincerely, 4F-/t R. Dacimo Vice President Indian Point Energy Center Docket No. 50-286 NL-05-078 Page 2 of 2 Attachment: LER-2005-002-00 CC: Mr. Samuel J. Collins Regional Administrator — Region I U.S. Nuclear Regulatory Commission U.S. Nuclear Regulatory Commission Resident Inspector's Office Resident Inspector Indian Point Unit 3 Mr. Paul Eddy State of New York Public Service Commission INPO Record Center NRC FORM 3660 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB NO. 3150-0104 EXPIRES: 06/30/2007 (6-2004) Estimated burden per response to comply with this mandatory collection request 50 hours.RReported lessons teamed are incorporated into the licensing process and fed back to Industry. Send comments regarding burden estimate to the Records and FOIA/Privacy Service Branch (T-5 F52), U.S. Nuclear Regulatory Commission, Washington, DC 29555-0001, or by InternetLICENSEE EVENT REPORT (LER) e-mail to Infocoilectsenrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-l0202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person Is not required to respond to, the Information collection. 1. FACIUTY NAME 2. DOCKET NUMBER 3. PAGE INDIAN POINT 3 05000-286 10OF06 4. TITLE Automatic Reactor Trip Due to 32 Steam Generator Steam Flow/Feedwater Flow Mismatch Caused by Low Feedwater Flow Due to Inadvertent Condensate Polisher Post Filter Bypass Valve Closure | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000287/LER-2005-002 | Unit 3 trip with ES actuation due to CRD Modification Deficiencies | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000336/LER-2005-002 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications |
|