05000368/LER-2017-001

From kanterella
Revision as of 00:56, 3 March 2018 by StriderTol (talk | contribs) (Created page by program invented by StriderTol)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
LER-2017-001, Inadequate Protection from Tornado Missiles Identified Due to Nonconforming Design Conditions
Arkansas Nuclear One – Unit 2
Event date: 04-06-2017
Report date: 05-30-2017
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications

10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident

10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
3682017001R00 - NRC Website
LER 17-001-00 for Arkansas Nuclear One, Unit 2, Regarding Inadequate Protection from Tornado Missiles Identified Due to Nonconforming Design Conditions
ML17150A483
Person / Time
Site: Arkansas Nuclear, Arkansas Nuclear One – Unit 2 Entergy icon.png
Issue date: 05/30/2017
From: Anderson R L
Entergy Operations
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
2CAN051702 LER 17-001-00
Download: ML17150A483 (7)


A. BACKGROUND NRC DOCUMENTS

Appendix A of DSS-ISG-2016-01 provides guidance for acceptable initial and comprehensive compensatory measures for licensee use in implementing the enforcement discretion outlined in EGM 15-002. The licensee should declare (log) the utilization of EGM 15-002, inform the resident inspector, and enter the issue into the corrective action program. For initial compensatory measures, it is expected that the measures listed are already in place at sites that may be affected by severe weather, such as tornados and/or hurricane force winds.

The measures should be verified as current and readily deployable within a very short timeframe.

ANO-2 was operating at 0% rated thermal power in Mode 6 when this condition was discovered. There were no other structures, systems, or components (SSCs) that were inoperable at the time that contributed in the event.

As a part of the closure of an ANO Tornado Protection Study, a tornado-generated missile vulnerability was identified on April 6, 2017. The vulnerability is associated with a conduit in the ANO-2 Fire Brigade Area on the 386 foot elevation of the ANO-2 Auxiliary Building. A western bound missile could strike the conduit in the Fire Brigade area above the ceiling tiles. Subsequent walk downs determined that only the western bound missile is creditable. This conduit contains the cables for instrumentation, controls, and interlocks for the #1 Emergency Diesel Generator (EDG)[EK].

The #1 EDG was declared inoperable and enforcement discretion per EGM 15-002 was implemented for the above issue and appropriate existing compensatory actions verified within the time allowed by the applicable LCOs. This condition has been entered into the ANO correction action program (CR-ANO-2-2017-1555). The guidance provided in EGM 15-002, with reference to Appendix A of DSS-ISG-2016-01, was utilized to address the compensatory measures that may be applicable to this condition.

This vulnerability is similar to the ones identified in ANO-1 LER 2016-002-00, dated August 11, 2016 (ML16224A767), and ANO-1 LER 2016-003-00 dated October 19, 2016 (ML16293A664).

Enforcement Guidance Memorandum (EGM) 15-002, “Enforcement Discretion for Tornado-Generated Missile Protection Noncompliance,” provides guidance to exercise enforcement discretion when an operating power reactor licensee does not comply with a plant's current site-specific licensing basis for tornado-generated missile protection. Specifically, discretion would apply to the applicable Technical Specification (TS) Limiting Condition(s) for Operation (LCO) that would require a reactor shutdown or mode change in the event a licensee could not meet TS LCO required action(s) within the TS completion time.

Interim Staff Guidance DSS-ISG-2016-01, “Clarification of Licensee Actions in Receipt of Enforcement Discretion Per Enforcement Guidance Memorandum EGM 15-002,” provides interim staff guidance to facilitate staff understanding of expectations for consistent oversight associated with implementing enforcement discretion for tornado missile protection noncompliance(s) per EGM 15-002.

C. DESCRIPTION OF EVENT

B. PLANT STATUS

comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by e-mail to used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

The identified condition is a design legacy issue. The cause of this issue was unclear and changing regulatory requirements during original plant licensing that led to an inadequate understanding of the regulatory guidance with respect to tornado missile protection design requirements.

Additional longer term corrective actions are being considered. Options include the development and installation of a plant modification which bring affected areas into compliance with tornado missile protection standards as applicable to the ANO-2 licensing basis. Additional options include the application of Revision 1 of Regulatory Guide 1.76 or the use of other evaluation methods such as the Tornado Missile (TORMIS) code or the Tornado Missile Risk Evaluator (TMRE), either of which would require a license amendment request and subsequent NRC approval.

The following corrective actions were completed upon identification of each individual vulnerability:

The following corrective actions have been taken to further address the condition. Note that EGM 15-002 requires follow-up actions to be completed within 60 days following tornado vulnerability identification which resulted in application of the enforcement discretion. These actions are in addition to those established upon initial identification of tornado missile vulnerability and intended to provide a discernable, safety beneficial change, when compared with the initially established compensatory measures.

D. EVENT CAUSES

E. CORRECTIVE ACTIONS

  • The ANO directive (COPD-038) for implementing the respective enforcement discretion was completed for this condition. The actions completed ensure compliance with the requirements of EGM 15-002.
  • The status of the affected TS components was documented in the Station Log.
  • The NRC resident inspector and the ANO Operating crews were briefed with respect to the equipment that could be potentially affected during a site tornado event and the compensatory actions identified to both minimize the potential for tornado missiles during severe weather and to mitigate the consequences of potential tornado missiles.
  • Appropriate procedures and directives have been revised to address the SSC impact per area identified above.
  • Operations personnel remain abreast of the tornado missile vulnerabilities and the established compensatory measures. Operations personnel are trained with respect to preparation for and the mitigation of natural events such as tornados. Procedures currently available cover events such as natural emergencies (includes tornado events), loss of offsite power, station blackout, and FLEX (diverse and flexible coping strategies) for beyond design basis events, along with the aforementioned ANO directive (COPD-038).

comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by e-mail to used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

As documented per EGM 15-002, tornado missile scenarios that may lead to core damage are very low probability events because safety-related SSCs are typically designed to withstand the effects of tornados. For a tornado missile-induced scenario to occur, a tornado would have to impact the site and result in the generation of missiles that would contact and fail vulnerable, unprotected safety-related equipment and/or unprotected safety-related subcomponents in a manner that is non-repairable and non-recoverable. In addition, because plants are designed with redundancy and diversity, the tornado missiles would have to affect multiple trains of safety systems and/or means of achieving safe shutdown.

The NRC has completed a generic risk analysis of potential tornado missile protection non-compliances to examine the risk significance for plant facilities. The generic analysis assumed that core damage would occur if a tornado hit a plant located in the most active tornado region in the country and that it caused a tornado- generated missile to fail all emergency core cooling equipment at the plant with no ability to recover. Given this conservative assumption, the staff's study established that the core damage frequency (CDF) associated with tornado missile-related non-compliances are well below CDFs requiring immediate regulatory action. In summary, the generic bounding risk analysis performed by the NRC concluded that this issue is of low risk significance.

During a postulated design basis tornado, the conditions documented could have resulted in a loss of the safety function for the EDGs, assuming the #2 EDG was already inoperable for a reason unrelated to tornado missile.

This system is used to mitigate the effects of a loss of offsite power by providing an emergency AC power source.

This condition had no actual safety consequences impacting plant or public safety since ANO-2 has not experienced a tornado missile event.

This event is reportable pursuant to the following criteria:

G. BASIS FOR REPORTIBILITY

F. SAFETY CONSEQUENCES

10 CFR 50.73(a)(2)(i)(B) Any operation or condition which was prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ii)(B) Any event or condition that resulted in the nuclear plant being in an unanalyzed condition that significantly degraded plant safety.

10 CFR 50.73(a)(2)(v)(D) Any event or condition that could have prevented the fulfillment of the safety function of structures or systems that are needed to mitigate the consequences of an accident comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by e-mail to used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

comments regarding burden estimate to the Information Services Branch (T-2 F43), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by e-mail to used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

The guidance provided in NUREG 1022 states under 10 CFR 50.73(a)(1):

The holder of an operating license for a nuclear power plant (licensee) shall submit a Licensee Event Report (LER) for any event of the type described in this paragraph within 60 days after the discovery of the event.

H. ADDITIONAL INFORMATION

10 CFR 50.73(b)(5) states that this report shall contain reference to “any previous similar events at the same plant that are known to the licensee.” NUREG 1022 reporting guidance states that term “previous occurrences” should include previous events or conditions that involved the same underlying concern or reason as this event, such as the same root cause, failure, or sequence of events.

A review of the ANO corrective action program and LERs for the previous three years was performed. Aside from LERs 2016-002-00 and 2016-003-00 mentioned previously, there were no other similar events identified at ANO during this time period.

No components failed due to this condition. The conditions identified herein were a result of extent of condition evaluation with respect to potential tornado design vulnerabilities. These vulnerabilities are legacy issues which are being addressed in accordance with EGM 15-002.

Energy Industry Identification System (EIIS) codes and component codes are identified in the text of this report as [XX].