05000456/LER-2009-002

From kanterella
Jump to navigation Jump to search
LER-2009-002, Safety Injection System Containment Sump Isolation Valve 1SI8811B Failed to Stroke Full Open Due to Torque Switch Assembly Corrosion
Docket Number Sequential Revmonth Day Year Year Month Day Year N/A N/Anumber No.
Event date: 06-24-2009
Report date: 08-02-2010
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications

10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat
4562009002R02 - NRC Website

A. Plant Operating Conditions Before The Event:

Event Date:� June 24, 2009� Event Time: 12:55 Unit: 1� MODE: 1� Reactor Power: 100 percent Unit 1 Reactor Coolant System (RC) [AB]: Normal Operating Temperature and Pressure

B. Description of Event:

There were no structures, systems or components inoperable at the beginning of the event that contributed to the severity of the event.

On June 24, 2009, Safety Injection system (SI) [BP] containment sump isolation valve 15I8811B was stroked open for surveillance testing. The control board showed dual indication for the 1SI8811B valve but never indicated full open. An equipment operator stationed locally at 1SI8811B indicated that the valve went approximately 30-40 percent open and stopped. At 12:55 hours, the surveillance was suspended for the 1SI8811B being de-energized in the intermediate position. At the time of the event, Braidwood Unit 1 was in Technical Specification 3.5.2 and 3.6.6, Limiting Conditions for Operation, to support testing and maintenance of Train B of the Emergency Core Cooling System (ECCS) system. The B train of Residual Heat Removal (RH) system was drained to allow the 1SI8811B valve stroke performance without resulting in moving water from the refueling water storage tank (RWST) to the containment sump. When 1S18811B failed to stroke fully open, Technical Specification 3.6.3, Containment Isolation Valves, Condition B was entered. Condition B requires the penetration flowpath be isolated within one hour by closing and deactivating one valve.

Investigation determined that the torque switch (TS) for the 1SI8811B motor operated valve (MOV) was corroded and non functional. The torque switch and limit switch finger bases were replaced, and diagnostic testing was performed. On June 26, 2009 at 02:42 hours, 1SI8811B was restored to operable status and LCOs were exited.

A review of past'performance of the 1S18811B valve indicated that the last time the valve was stroked successfully was September 20, 2007. The exact time of the failure cannot be determined, however it can be determined that the failure occurred between the times 1SI8811B was successfully stroked and when the failure was discovered. Therefore, this event is reportable per 10 CFR 50.73(a)(2)(i)(B), any condition prohibited by the plant's Technical Specifications. Additionally, since there was a period of time when the A RH Train was out of service for testing and maintenance coincident with the condition experienced by 1SI8811B, this event is reportable per 10 CFR 50.73(a)(2)(v)(B) as a condition that could have prevented the fulfillment of a system's safety function.

C. Cause of Event

Following the June 24, 2009 event, the 1S18811B actuator limit switch compartment cover was removed for inspection of the TS assembly, limit switch (LS) assembly and wiring. The normally closed "open side" TS contacts were open, and the open TS bypass limit switch contact was also open. With both switch contacts open, the valve's motor would de-energize stopping valve travel. The TS was found to be corroded and non functional.

The TS utilizes a spring to maintain the open and closed side contact in the closed position until a torque overload is experienced, opening the contacts. In this case, the "open side" TS contacts were open and had to be forcefully closed due to corrosion (i.e., the spring could not move the contact arm).

Water was found in the actuator LS compartment that houses the TS and LS components. The bottom of the compartment cover was wet and the unused and capped conduit penetrations on the bottom were full of water.

� Subsequent to this event, on 10/30/2009, water was identified dripping from the roof removable concrete slab area and falling in the area of the 1SI8811B valve. Further inspection identified water in the stem nut area of the valve forming a puddle on top of the actuator. It was noted, that during the several hours immediately prior to the walkdown, heavy rains had been experienced in the area. An inspection of the valve actuator identified the presence of water in the valve LS compartment. A conduit connection on the LS compartment was loose, which was the water intrusion point. Additionally, it was determined that the concrete removable slabs did not conform to the roof design drawings. Specifically, the design drawings indicate that a multi-ply insulated roof membrane was required to cover and seal the concrete removable slabs; however, none was ever installed.

The cause of the 1SI8811B failure to fully open was determined to be corrosion of the TS assembly, causing it to become non-functional, due to water intrusion into the LS compartment through the conduit connector. The root cause of this event was determined to be that station personnel did not fully understand that the area design configuration did not incorporate water tight electrical components to prevent water intrusion, resulting in a lack of sensitivity to the effects of water spills, sprays or leaks in the area.

D. Safety Consequences:

There were no safety consequences impacting the plant or public safety as a result of this event. The 1SI8811B valve is closed during normal operations, and the issue was discovered during a planned valve stroke test of the 1SI8811B valve in accordance with Operating surveillances as required by Technical Specifications.

An evaluation was performed to determine past operability and whether the valve could pass design flow at the as-found opening travel position for the valve. Based on the failure mode, the valve would have been capable of opening to the bypass LS setting of approximately 38 percent open, and the valve was capable of passing the required ECCS recirculation flow at this partial opening position. Additional consequences of the inability of 1SI8811B to achieve full open valve travel are the failure to meet the electrical interlock to manually open valve 1518804B, Residual Heat Removal (RH) to Safety Injection (SI) crosstie valve, and 1CS009B Containment Spray (CS) Pump 1B Sump Suction valve from the main control room. The 15I8804B is required to open in order to establish flow from the ECCS sump to the Hi/Intermediate Head ECCS pumps during the cold leg recirculation phase of ECCS. The 1CS009B is required to open in order to establish flow to the CS system from the containment recirculation sump.

The SI containment sump is required for loss of coolant accidents (LOCA) inside containment during the recirculation phase of the accident. Additionally, rupture of a control rod drive mechanism causing a rod cluster control assembly ejection accident results in a loss of reactor coolant inventory which the SI system would be required to mitigate the accident. The SI containment sump isolation valves receive a signal to open when an SI signal is actuated and the refueling water storage tank (RWST) reaches the RWST Low-2 setpoint. The CS system is required for a LOCA to minimize containment pressure and will also actuate during a feedwater or steam line break inside containment.

This event resulted in a safety system functional failure due to loss of interlock function of 1SI8811B. The 1SI8811B is required to be fully open to make up electrical interlocks that allow opening of 1518804B and 1CS009B. The periods of time when the redundant train of RH and CS were unavailable result in a loss of safety function. The CS and ECCS systems would not be able to be realigned to take suction from the containment recirculation sump.

The risk evaluation concluded that the total risk impact associated with the failure of 1SI8811B to fully open was very low risk significance. However, as documented in the Final Significance Determination letter dated February 25, 2010, the NRC's assessment resulted in a finding with low to moderate safety significance.

E. Corrective Actions:

Corrective actions taken include (actions completed):

  • Cleaning and drying the wires and limit switch compartment /enclosure on 1S18811B
  • Repairing the roof removable concrete slab area in accordance with design drawings Corrective actions to prevent recurrence include:
  • Provide training to all applicable Braidwood site personnel on the general design configurations and the need to ensure proper controls involving water within specific equipment qualification zones
  • Develop and implement processes and controls to evaluate electrical components affected by potential water intrusion in safety related areas

F. Previous Occurrences:

There have been no similar Licensee Event Report events at Braidwood Station in the last three years.

G. Component Failure Data:

Manufacturer Nomenclature Model Mfq. Part Number Limitorque Corporation Motor Operator Valve Actuator SMB-2 N/A NRC FORM 366A (9-2007) PRINTED ON RECYCLED PAPER