05000413/LER-2006-002

From kanterella
Jump to navigation Jump to search
LER-2006-002, Safe Shutdown Potentially Challenged by an External Flooding Event and Inadequate Design and Configuration Control
Docket Number
Event date:
Report date:
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
4132006002R00 - NRC Website

BACKGROUND

This event is being reported under the following criteria:

10 CFR 50.73(a)(2)(i)(B), Technical Specification prohibited operation or condition, and 10 CFR 50.73 (a)(2)(v)(A), Any event or condition that could have prohibited the fulfillment of a safety function of systems or structures.

Catawba Nuclear Station Unit 1 is a Westinghouse four-loop Pressurized Water Reactor (PWR) [EIIS: RCT]. Unit 1 was shutdown in Mode 3 (Hot Standby) prior to this event.

10 CFR 50 Appendix A, General Design Criterion 2, "Design Bases for Protection against Natural Phenomena," requires that structures, systems, and components (SSCs)important to safety be designed to withstand the effects of natural phenomena such as floods, tsunami, and seiches without loss of capability to perform their safety functions.

Catawba Nuclear Station is designed to safely handle the run-off from a Probable Maximum Precipitation (PMP) event such that the flood waters do not adversely affect any SSCs important to safety. Additionally, Catawba is provided with a surface water drainage system that is designed and constructed to protect all safety-related facilities from flooding during a local PMP.

The Diesel Generator (DG) [EIIS: EK] System operates to supply emergency power for the continued operation of specific important plant equipment. Unit 1 has two emergency DGs lA and 1B. Each DG is used as the standby emergency power source for each 4160-volt emergency bus.

DGs 1A and 1B are dedicated to essential busses lETA and lETB [EIIS:

EB], respectively. The DGs will start automatically on a safety injection signal or on a bus loss of voltage or degraded voltage signal. Loads will automatically connect to the bus as required by the respective load sequencer [EIIS: EK].

Technical Specification (TS) Limiting Condition for Operation (LCO) 3.8.1 governs AC Sources - Operating for Modes 1, 2, 3, and 4. LCO 3.8.1 requires in part that two DGs be operable. Condition B for this LCO specifies that with one DG inoperable, the DG must be restored to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, in addition to the other Required Actions that must be performed.� Condition G specifies that with the Required Action and associated Completion Time of Condition B not met, the unit must be in Mode 3 within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in Mode 5 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.

No structures, systems, or components were out of service that had any effect on the event.

EVENT DESCRIPTION

(Certain event times are approximate.) Date/Time�Event Description 05/20/06/1403 Condenser Circulating Water (RC) [EIIS: KF] System Pumps lost power during the Dual Unit Loop Event (LER 413-06-001).

05/21/06/2020 2A RC pump placed in service with 2A and 2B Cooling Towers in BYPASS (to basin).

05/21/06/---- 2A and 2B Cooling Towers placed in service with RC flow aligned to the upper level.

05/22/06/---- Unit 2 Cooling Tower upper level screens clogged causing water to spill over the outer wall of the Cooling Towers.

05/22/06/---- Unit 1 remained shutdown in Mode 3. No activities were in progress that had any effect on the event.

05/22/06/0649 Water started flowing into 1A DG Room through open Nuclear Service Water System (RN) [EIIS:

BI] conduit sleeves coming from conduit man hole (CMH)-3 into the south wall of lA DG Room.

One WN (DG Room Sump Pump System) sump pump auto-started.

05/22/06/0653 Water level in the lA WN sump annunciated on high level (There are two WN sump pumps in each DG room. The start of the second pump gives a high level alarm in the Control Room.).

05/22/06/---- Operations personnel dispatched Maintenance personnel to the lA DG Room to investigate the functionality of the WN sump pumps.

05/22/06/0815 During routine environmental surveillances, Cooling Towers A and B were spilling over the top excessively causing water to reach the ground. Chemistry personnel notified their management and Operations management.

05/22/06/---- Operations made the required RC System alignments to mitigate spillover from the upper Cooling Tower screens.

05/22/06/----� Site personnel investigated and found the source of the water entering lA DG Room.

05/22/06/0855 Operations made a conservative decision to declare DG lA inoperable due to the water intrusion. DGs 1B, 2A and 2B were not affected by this condition.

Operations personnel completed RC system alignments to terminate spillover. At this time, water stopped flowing into the 1A DG Room through the open RN system conduit sleeve.

05/22/06/0900� An extent of condition (EOC) was initiated for electrical conduit penetrations entering the Unit 1 and 2 DG Rooms and the Auxiliary Building.

05/22/06/---- � The missing/degraded flood protection design features highlighted potential vulnerabilities in barriers to the PMP. Engineering was asked to assist with the reportability determination.

05/23/06/----� Operations declared DG 1A operable based upon sealing the penetrations affecting 1A DG.

05/23/06/2106� 07/17/06/---- Engineering completed an evaluation which supported a determination that the as-found condition of DG lA conduit seals was reportable. Management concurred with this decision and initiated the appropriate reportability processes.

CAUSAL FACTORS

The intrusion of water into the lA DG Room has been attributed to a Possible Design, Manufacturing, Construction/Installation Deficiency and inadequate configuration control of conduit/trench barriers to protect against flooding.

The PMP results in maximum flooding of the Station Yard. Based upon a review of the data and conditions surrounding the potential for water intrusion, the 1A DG would not be able to handle the expected water intrusion from such an event for a period of time where operator actions could be considered creditable to preclude declaring the DG inoperable. Based upon an inflow of 400 gpm to the room, only approximately 15 minutes would be available to respond to the water intrusion when alarms were evident. Given the nature of the PMP, there would not be a readily straightforward method to remove water from the room. This would further complicate the mitigation effort.

Subsequent inspections relative to the cause and extent of condition of the problem identified that the other three diesel generator rooms (1B, 2A and 2B) were not subject to the same problem. Several potential barriers that were identified on the drawings were either missing or degraded. On DG 1B, inspections revealed that there was one conduit on the DG side that was degraded but intact and conduits from the CMH going to DG 1B Room were open. These open conduits were subsequently sealed. There was no path, even during a PMP, that would cause DG 1B to become inoperable. On DGs 2A and 2B, there were no open conduits found on the DG side nor on the CMH going to the DGs.

A review of modifications, work orders, and procedure changes performed since the last refueling outage did not reveal any changes being made to the affected flood protection barriers. The time frame for the existence of these flood protection deficiencies is indeterminate. There were no processes/procedures in place to periodically inspect these flood protection barriers.

Additionally, during the past 3 years, 18 DG was inoperable at various times for various reasons. With 1A DG determined to be inoperable due to this issue, both DGs would have been inoperable during those times, which is a condition prohibited by T.S. Also, because both DGs potentially could have been unavailable if a PMP event would have occurred during those times, this event is considered a safety system functional failure.

CORRECTIVE ACTIONS

Immediate:

1. Site personnel investigated and found the source of the water that was entering 1A DG Room.

2. Operations personnel made the required RC system alignments to terminate spillover from the upper Cooling Tower screens prior to causing damage to DG 1A.

Subsequent:

1. Work Orders were completed to inspect the conduit sleeves leading to the Unit 1 and Unit 2 DG Rooms and seal as needed.

2. An extent of condition (EOC) was performed for electrical conduit penetrations entering the Auxiliary Building.

Planned:

1. Implement a preventative maintenance program to ensure that the identified flood protection barriers are inspected periodically. This will be driven by frequencies consistent with the characteristics of the materials of construction of the penetration seals used.

There are no NRC commitments contained in this LER.

SAFETY ANALYSIS

During a postulated design basis flooding event (PMP) the omission or degradation of flood protection barriers would have challenged the safe shutdown capability of lA DG. DGs 1B, 2A, and 2B flood barriers were sufficiently intact and would not have been challenged by a PMP.

Additionally, during the time that flood barriers for lA DG were inadequate, DG 1B was taken out of service for various reasons. During the last three years, DG 1B was unavailable for approximately 187.74 hours8.564815e-4 days <br />0.0206 hours <br />1.223545e-4 weeks <br />2.8157e-5 months <br />. Therefore, at those times, had a PMP occurred, both DGs may have been unavailable to perform their safety function. No actual PMP event occurred during the time that the flood barriers were inadequate.

Offsite power was available and would not have been affected by the condition identified in this LER. A risk assessment of this event determined that the Conditional Core Damage Probability (CCDP) associated with this event is Early Release Probability (CLERP) associated with this event is on Unit 1. Therefore, this event is of low risk significance.

The health and safety of the public were not adversely affected by this event.

ADDITIONAL INFORMATION

Within the last three years, there were no LERs involving an external flooding event that could have potentially challenged safe shutdown capabilities and that was attributed to a Possible Design, Manufacturing, Construction/Installation Deficiency. Therefore, this event was determined to be non-recurring in nature.

Energy Industry Identification System (EIIS) codes are identified in the text as [EIIS: XX]. This event is not considered reportable to the Equipment Performance and Information Exchange (EPIX) program.

This event is considered to be a Safety System Functional Failure.

There were no releases of radioactive materials, radiation exposures, or personnel injuries associated with this event.