05000461/LER-2016-006

From kanterella
Jump to navigation Jump to search
LER-2016-006, Missed Surveillance Results in a Condition Prohibited by Technical Specifications
Clinton Power Station, Unit 1
Event date: 04-21-2016
Report date: 06-10-2016
4612016006R00 - NRC Website
LER 16-006-00 for Clinton Power Station Unit 1 RE: Missed Surveillance Results in a Condition Prohibited by Technical Specifications
ML16165A491
Person / Time
Site: Clinton Constellation icon.png
Issue date: 06/10/2016
From: Stoner T R
Exelon Generation Co
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
SRRS 5A.108, U-604288 LER 16-006-00
Download: ML16165A491 (5)


Reported lessons learned are incorporated into the licensing process and fed back to industry.

Send comments regarding burden estimate to the FOIA, Privacy and Information Collections Branch (T-5 F53), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by internet e-mail to Infocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

PLANT AND SYSTEM IDENTIFICATION

General Electric—Boiling Water Reactor, 3473 Megawatts Thermal Rated Core Power Energy Industry Identification System (EIIS) codes are identified in the text as [XX]

EVENT IDENTIFICATION

Missed Surveillance Results in a Condition Prohibited by Technical Specifications A. Plant Operating Conditions before the Event Unit: 1 Event Date: 04/21/16 Mode: 1 Mode Name: Power Operation

B. DESCRIPTION OF EVENT

Event Time: 1709 Reactor Power: 85 percent At 1709 hours0.0198 days <br />0.475 hours <br />0.00283 weeks <br />6.502745e-4 months <br /> (CDT) on April 21, 2016, in preparation to reduce power in order to restore the 'B' turbine driven reactor feed pump (TDRFP) to service, Operations discovered that Technical Specification (TS) Surveillance Requirement (SR) 3.3.2.1.2 had not been performed eight days earlier. On April 13, 2016 Operations lowered reactor power below the Control Rod Withdrawal Limiter (RWL) High Power Setpoint (HPSP) (approximately 66% rated thermal power)

  • to remove 'B' TDRFP from service due to high vibrations. TS SR 3.3.2.1.2 requires a functional test of the 4-Notch Control Rod Withdraw Limit of the RWL within one hour of resetting the HPSP during a power reduction; if it has not been completed within the previous 92 days. The SR was last performed on April 26th, 2015 and, therefore, was required to be performed. TS 3.3.2.1 Required Action A.1 requires with one or more RWL channels inoperable, to immediately suspend control rod withdrawal. Contrary to this requirement, control rods were withdrawn to restore reactor power above the HPSP following restoration of the 'B' TDRFP to service.

The RWL provides protection from control rod withdrawal errors above the Low Power Setpoint (LPSP) (29.2% rated thermal power). Above the LPSP and below the HPSP, the RWL initiates a control rod withdrawal block every 4 notches. Above the HPSP, the RWL initiates a control rod withdrawal block every 2 notches. TS SR 3.3.2.1.2 requires a functional test every 92 days of the 4-Notch Control Rod Withdraw Limit when operating above the LPSP but below the HPSP, and TS SR 3.3.2.1.1 requires a functional test of the 2-Notch Control Rod Withdraw Limit every 92 days when operating above the HPSP.

Both of the RWL Functional tests are performed by Clinton Power Station (CPS) surveillance procedure CPS 9014.01, RPC System Withdrawal Limitation Test. However each SR has a unique Preventative Maintenance Identification Number (PMID) which is listed in the integrated operating procedures to support determining whether the SR had been performed within the last 92 days when reactor power is lowered below the HPSP.

Clinton Power Station, Unit 1 05000461 A review of this event determined that a Senior Reactor Operator (SRO) erroneously identified on April 13, 2016 that the previous performance of TS 3.3.2.1.2 surveillance test procedure CPS 9014.01 was satisfactorily executed on March 4, 2016 based on a review of the operating logs rather than a review of the Passport PMID. However, as identified above, this procedure tests both the 2-Notch Rod Withdraw Limit (i.e., SR 3.3.2.1.1) and the 4-Notch Control Rod Withdraw Limit (i.e., SR 3.3.2.1.2). The March 4, 2016 performance of CPS 9104.01 only tested the 2- Notch Control Rod Withdraw Limit. As part of the shift turnover, the SRO communicated the work order which documented the last performance of CPS 9014.01 on March 4, 2016 to the incoming SRO responsible for directing the power reduction. However, the work order identified by the SRO tested only the 2-Notch surveillance test (SR 3.3.2.1.1) and not the required 4- Notch surveillance test (SR 3.3.2.1.2).

When the power reduction process commenced following shift turnover, the responsible SRO only verified that the above work order was complete. He did not verify, by PMID, that results for the required 4-Notch surveillance test (SR 3.3.2.1.2) were current. The failure to verify by PMID that the required surveillance was current was identified as the apparent cause of this event.

C. CAUSE OF EVENT

The SRO responsible for the down power on April 13, 2016 did not validate, by PMID, that the required surveillance (i.e., SR 3.3.2.1.2) was current. This personnel error resulted in the missed surveillance and subsequent violation of TS 3.3.2.1 Required Action A.1. A performance analysis (PA) was conducted to determine if there was a possible training contributor to this event. This PA concluded that there was no knowledge issue and no training actions were required.

D. SAFETY ANALYSIS

There were no safety consequences involved with the condition described in this report.

TS SR 3.3.2.1.2 required that the channel functional test be performed within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of thermal power less than HPSP. The 4-Notch Control Rod Withdraw Limit Test surveillance (SR 3.3.2.1.2) was not performed on April 13, 2016 due to a human performance error. This condition did not adversely impact the function of plant systems, structures, or components or the capability to safely shut the reactor down the reactor. Subsequent performance of this test on April 21, 2016 confirmed that the 4-notch limiter was operable throughout this event.

The reactor protection system (RPS) is designed to initiate a rapid, automatic shutdown of the reactor. It acts in time to prevent fuel cladding damage and any nuclear system process barrier damage following abnormal operational transients. The RPS overrides all operator actions and process controls and is based on a fail-safe design philosophy that allows appropriate protective action even if a single failure occurs.

There are no known single malfunctions that can cause the unplanned withdrawal of even a single control rod. However, if multiple malfunctions are postulated, studies show that an unplanned control rod withdrawal can occur at withdrawal speeds that vary with the combination of malfunctions postulated. In all cases the subsequent withdrawal speeds are less than that assumed in the control rod drop accident analysis as discussed in USAR Chapter 15, "Accident Analyses". Therefore, the physical and radiological consequences of such control rod withdrawals are less than those analyzed in the control rod drop accident.

It is concluded that there was no reduction to the health and safety of the public resulting from the condition described in this report.

E. CORRECTIVE ACTIONS

Management Associated Results Company, Inc. (MARC) principles were applied to the individuals involved.

F. PREVIOUS SIMILAR OCCURENCES

There are no previous occurrences involving a missed TS SR 3.3.2.1.2 (4-Notch surveillance test) for the Control Rod Withdrawal Limiter.

G. COMPONENT FAILURE DATA

There was no component failure associated with this event.