05000296/LER-2016-002, Regarding Improperly Installed Switch Results in Condition Prohibited by Technical Specifications

From kanterella
Jump to navigation Jump to search
Regarding Improperly Installed Switch Results in Condition Prohibited by Technical Specifications
ML16116A051
Person / Time
Site: Browns Ferry Tennessee Valley Authority icon.png
Issue date: 04/22/2016
From: Bono S
Tennessee Valley Authority
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
LER 16-002-00
Download: ML16116A051 (10)


LER-2016-002, Regarding Improperly Installed Switch Results in Condition Prohibited by Technical Specifications
Event date:
Report date:
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications

10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded

10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition
LER closed by
IR 05000259/2016000 (9 November 2016)
IR 05000259/2016003 (9 November 2016)
2962016002R00 - NRC Website

text

Tennessee Valley Authority, Post Office Box 2000, Decatur, Alabama 35609-2000 April 22, 2016 ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, D.C. 20555-0001

Subject:

Browns Ferry Nuclear Plant, Unit 3 Renewed Facility Operating License No. DPR-68 NRC Docket No. 50-296 Licensee Event Report 50-296/2016-002-00 10 CFR 50.73 The enclosed Licensee Event Report provides details of the inoperability of the 3B and 3D Core Spray (CS) pumps, 3D Residual Heat Removal (RHR) pump, D1 Residual Heat Removal Service Water (RHRSW) pump for longer than allowed by plant Technical Specifications (TS). The Tennessee Valley Authority (TVA) is submitting this report in accordance with Title 10 of the Code of Federal Regulations (10 CFR) 50.73(a)(2)(i)(B), as any operation or condition which was prohibited by the plant's TS.

There are no new regulatory commitments contained in this letter. Should you have any questions concerning this submittal, please contact J. L. Paul, Nuclear Site Licensing Manager, at (256) 729-2636.

Enclosure: Licensee Event Report 50-296/2016-002 Improperly Installed Switch Results in Condition Prohibited by Technical Specifications.

cc (w/ Enclosure):

NRC Regional Administrator - Region II NRC Senior Resident Inspector - Browns Ferry Nuclear Plant

ENCLOSURE Browns Ferry Nuclear Plant Unit 3 Licensee Event Report 50-296/2016-002-00 Improperly Installed Switch Results in Condition Prohibited by Technical Specifications.

See Enclosed

NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104 EXPIRES: 10/31/2018 (11 -2015) c.."t.'-~ REGt1<-f

, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.

3. PAGE Browns Ferry Nuclear Plant, Unit 3 05000296 1 OF 8
4. TITLE Improperly Installed Switch Results in Condition Prohibited by Technical Specifications
5. EVENT DATE
6. LER NUMBER
7. REPORT DATE
8. OTHER FACILITIES INVOLVED I

SEQUENTIAL I REV FACILITY NAME DOCKET NUMBER MONTH DAY YEAR YEAR NUMBER NO.

MONTH DAY YEAR N/A N/A 2

22 16 2016 - 002 00 4

22 2015 FACILITY NAME DOCKET NUMBER 1\\1/A N/A

9. OPERATING MODE
11. THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply)

D 20.2201 (b)

D 20.2203(a)(3)(i)

D 50.73(a)(2)(ii)(A)

D 50. 73(a)(2)(viii)(A)

D 20.2201(d)

D 20.2203(a)(3)(ii)

D 50.73(a)(2)(ii)(B)

D 50. 73( a)(2)(viii)(B) 5 D 20.2203(a)(1)

D 20.2203(a)(4)

D 5o.73(a)(2)(iii)

D 50. 73( a)(2)(ix)(A)

D 20.2203(a)(2)(i)

D 50.36(c)(1 )(i)(A)

D 50. 73(a)(2)(iv)(A)

D 50. 73(a)(2)(x)

10. POWER LEVEL D 20.2203(a)(2)(ii)

D 50.36(c)(1 )(ii)(A)

D 50. 73(a)(2)(v)(A)

D 73.71 (a)(4)

D 20.2203(a)(2)(iii)

D 50.36(c)(2)

D 50. 73(a)(2)(v)(B)

D 73.71 (a)(5)

D 20.2203(a)(2)(iv)

D 50.46(a)(3)(ii)

D 50. 73(a)(2)(v)(C)

D 73.77(a)(1) 0 D 20.2203(a)(2)(v)

D 50. 73(a)(2)(i)(A)

D 50. 73(a)(2)(v)(D)

D 73.77(a)(2)(i)

D 20.2203(a)(2)(vi)

~ 50. 73(a)(2)(i)(B)

D 50. 73(a)(2)(vii)

D 73.77(a)(2)(ii)

D 50. 73(a)(2)(i)(C)

D OTHER Specify in Abstract below or in YEAR 2016 -

3. LER NUMBER SEQUENTIAL NUMBER 002

C. Dates and approximate times of occurrences

Dates & Approximate Times October 28, 2015 at 2000 CDT February 20, 2016 at 0518 CST February 22, 2016 at 1445 CST February 23, 2016 at 1520 CST March 1, 2016 at 0704 CST Occurrence Operations satisfactorily completed the Common Accident Signal Logic surveillance (SAT 3-SR-3.8.1.6).

Unit 3 entered Mode 4.

Relays 3-RL Y-211-NVA-D 1 and 3-RL Y-211-NVA-02 on the 3ED 4kV SD BO found to be de-energized when normal power was available during the performance of 3-SR-3.8.1.9(3C), Diesel Generator 3C Emergency Load Acceptance Test.

Operations declared the 3ED 4kV SD BO to be operable following the completion of breaker inspection, cleaning, and adjustment.

The 52STA switch for the 4KV Shutdown Board 3ED/8 was replaced.

D. Manufacturer and model number (or other identification) of each component that failed during the event:

REV NO.

00 The failed component was a 52STA switch in the MJ position of Breaker 3-BKR-211-03ED/008, model number 5-3AF-GEH-250-1200-58.

E. Other systems or secondary functions affected

No other systems or secondary functions were affected by this event.

F. Method of discovery of each component or system failure or procedural error

Failure was discovered during performance of 3-SR-3.8.1.9 (3C), when the NVA-01 and NVA-D2 relays on the 3ED 4kV SD BO were found to be de-energized.

G. The failure mode, mechanism, and effect of each failed component, if known:

Troubleshooting determined that relay 3-RLY-075-14A-K13B was de-energized due to a binding of the 52STA switch and the 52STA Cam Linkage. This binding was due to a misalignment of the 52STA switch and the 52STA Cam Linkage as a result of improper installation.

H. Operator actions

There were no operator actions associated with this event.

I. Automatically and manually initiated safety system responses

There were no automatic or manual safety system responses associated with this event.

Ill.

Cause of the event

A. The cause of each component or system failure or personnel error, if known:

Troubleshooting determined switch failure was caused by a failure of the 6-6C contacts on the 52STA switch, from and a binding of the 52STA Cam Linkage. This binding was caused by a misalignment of the switch to linkage interface, due to improper installation.

8. The cause(s) and circumstances for each human performance related root cause:

00 A review of procedure ECl-O-OOO-SWZ001, Replacement of Type SB switches, which was used to install the 52STA switch found there were no procedural steps for verifying proper alignment between the 52ST A switch and the Breaker 52ST A Switch Cam.

IV.

Analysis of the event

The Tennessee Valley Authority is submitting this report in accordance with Title 10 of the Code of Federal Regulations (10 CFR) 50.73(a)(2)(i)(B), as any operation or condition which was prohibited by the plant's Technical Specifications (TSs). It was determined that the auto-start function for the 3B and 3D CS pumps, 3D RHR pump, and the D1 RHRSW pump was inoperable from October 28, 2015 until February 20, 2016 when Unit 3 entered Mode 4.

BFN, Unit 3, TS 3.3.5.1 requires Emergency Core Cooling System (ECCS) instrumentation for each function in Table 3.3.5.1-1, to be Operable as specified by Table 3.3.5.1-1. When BFN, Unit 3, time delay relay for the CS Band D pumps and the time delay relay for the Low Pressure Coolant Injection (LPCI) RHR pump D is declared inoperable, TS 3.3.5.1 Required Action C.1 requires the supported ECCS features to be declared inoperable when the redundant ECCS initiation capability is inoperable within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of discovering the loss of initiation capability for features in both divisions when in Modes 1, 2, or 3. Required Action C.2 requires that the inoperable channel be restored to Operable status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. If the inoperable channel cannot be restored to Operable status in the required time period, TS 3.3.5.1 Required Action H.1 requires that the supported ECCS features be declared inoperable immediately. BFN, Unit 3, TS 3.5.1 requires each ECCS injection/spray subsystem and the Automatic Depressurization System (ADS) function of six safety/relief valves to be Operable in Mode 1, and in Modes 2 and 3, except High Pressure Coolant Injection (HPCI) and ADS valves are not required to be operable with reactor steam pressure less than or equal to 150 pounds per square SEQUENTIAL NUMBER 002 REV NO.

00 inch gauge (psig). When the auto-start functions for the 3B and 30 CS pumps and the 30 LPCI RHR pump were disabled, two low pressure ECCS injection or spray subsystems were inoperable. With two or more low pressure ECCS injection or spray subsystems inoperable, TS 3.5.1 Required Action H.1 requires that BFN, Unit 3, immediately enter TS LCO 3.0.3. The auto-start functions for the BFN, Unit 3, 3B and 30 CS pumps, and the 30 LPCI RHR pump were inoperable from October 28, 2015 until February 20, 2016, which was longer than allowed by TS.

BFN, Unit 3, TS LCO 3.7.1 requires eight Operable RHRSW pumps whenever three units are fueled during Modes 1, 2, and 3. With one RHRSW pump inoperable, Required Action A.2 requires the pump be restored to Operable status within 30 days. If the required Completion Times for Condition A is not met, Required Action G.1 requires BFN, Unit 3, to enter Mode 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, and Required Action G.2 requires entering Mode 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The auto-start function for the 01 RHRSW pump was inoperable from October 28, 2015 until February 20, 2016. Based on this evaluation, BFN, Unit 3, operated with one inoperable RHRSW pump for longer than allowed by TS.

During investigation, Operations discovered NVA-01 and NVA-02 relays on the 3ED 4kV SD BO were de-energized. Further investigation revealed this was caused by a failure of the 6-6C contacts on the MJ(52STA) switch associated with breaker BFN-3-BKR-211-03ED/008, which de-energized the NVA-01 and NVA-02 relays.

The last exercising of the 3ED 4kV SD BO breaker and successful actuation of the switch occurred on October 28, 2015, at 2000 Central Daylight Time (CDT), during Common Accident Signal Logic testing. The Past Operability Evaluation concluded that the auto-start function for the 3B and 30 CS pumps, 30 RHR pump, and the 01 RHRSW pump was inoperable from October 28, 2015 to February 20, 2016, when Unit 3 entered Mode 4. The duration of system inoperability was longer than allowed by plant TS 3.3.5.1, TS 3.5.1, and TS 3.7.1.

V.

Assessment of Safety Consequences

This event resulted in BFN, Unit 3, auto-start function for the 3B and 30 CS pumps, 30 RHR pump, and the 01 RHRSW pump being inoperable for longer than allowed by plant TS. The manual start functions were not affected by MJ(52STA) switch failure, and Control Room operators could have manually started these pumps when their failure to automatically start was identified.

The automatic starting capability of these pumps when the 4kV Shutdown Board 3ED is energized from other than normal sources remained available. In addition, automatic start capability of the other Unit 3 CS, RHR, and RHRSW pumps was unaffected by this condition. The Probabilistic Risk Analysis concluded there was negligible increase in risk due to this condition.

A. Availability of systems or components that could have performed the same function as the components and systems that failed during the event:

System availability was not impacted by this event. The operability of the 3A and 3C CS pumps; the 3A, 3B, and 3C RHR pumps; and the A 1, B1, and C1 RHRSW pumps was not affected by this event. Each of these pumps were capable of automatically performing their required safety functions.

B. For events that occurred when the reactor was shut down, availability of systems or components needed to shut down the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident:

During the time the reactor was shutdown, all affected systems remained available to perform their required safety functions.

C. For failure that rendered a train of a safety system inoperable, an estimate of the elapsed time from discovery of the failure until the train was returned to service:

lnoperability of the MJ(52STA) switch on relay 3-RLY-075-14A-K13B was discovered to be inoperable on February 22, 2016 at 1445 hours0.0167 days <br />0.401 hours <br />0.00239 weeks <br />5.498225e-4 months <br /> CST. Operability of the switch was restored on February 23, 2016 at 1520 CST. Because of the failure of the switch, the 3B and 30 CS pumps, the 30 RHR pump and the 01 RHRSW pumps were considered inoperable from October 28, 2015 until February 20, 2016.

VI.

Corrective Actions

Corrective Actions are being managed by TVA's corrective action program under Condition Reports (CRs) 1140776 and 803629.

A. Immediate Corrective Actions

The MJ(52STA) switch on the 3ED 4kV SD BO breaker was replaced, in accordance with Work Order 116560300.

B. Corrective Actions to Prevent Recurrence Instructions to verify proper 52STA switch alignment will be developed. Procedure ECl-O-OOO-SWZ001, Replacement of Type SB switches, will be revised to add steps to verify the proper alignments of the 52STA switch and the Breaker 52STA Switch Cam. This will address the apparent cause, and prevent failures of this type during future 52STA switch installations.

VII. Additional Information

A. Previous Similar Events

A search of the Corrective Action Program for BFN, Units 1, 2, and 3, identified seven MJ(52STA) switch failure events since 2010. These failures were captured by CRs 230836, 328038, 672598, 752488, 792179, 801449, and 980227. These individual failures were collectively evaluated by CR 803629 described below. CR 803629 was written in June 2014 to document the trend of 4 kV breaker's (MJ)52STA stationary contact failures, the same failure that resulted in this event. The cause evaluation for CR 803629 identified two apparent causes.

1. The appropriate preventative maintenance (PM) or pre-emptive replacements were not implemented. The maintenance program only inspected switches for failure, and only took action if the MJ(52STA) switch had failed. This strategy is inadequate with respect to PM, as the associated vendor manuals require contact inspection for wear and burning at regular intervals. Because the existing plant configuration and outage constraints prohibit the performance of a complete cleaning and inspection of Breaker Compartment stationary switches, switch replacement is being implemented on a 24 year frequency to satisfy PM requirements. The 24 year frequency interval was chosen based on engineering judgment and a corrective action review of other similar switches at BFN with component lifetimes of less than 10,000 cycles. An engineering evaluation concluded that this replacement strategy was more conservative than the recommended cleaning and inspection strategy.
2. BFN's elected and documented PM strategy for Medium Voltage Breakers includes the associated switchgear, but the Breaker Program excludes the associated switchgear components. This allows the breaker support components to be overlooked with respect to reliability despite being a vital component to the reliability of the breaker.

The extent of condition review, performed during the causal analysis for CR 803629, identified the 3ED 4kV SD BO breaker in the population of breakers containing MJ(52STA) switches are subject to failure due to age-related degradation. Work orders were created to replace the MJ(52STA) switches in each breaker identified during the extent of condition review.

B. Additional Information

There is no additional information.

C. Safety System Functional Failure Consideration:

In accordance with NUREG-1022, this event is not a safety system functional failure. System availability was impacted by this event. Although the 3B and 30 CS pumps, 30 RHR pump, and the 01 RHRSW pump were considered inoperable during this event, the operability of the 3A and 3C CS pumps, the 3C RHR pump, and the C1 RHRSW pump was not affected. These pumps 2016 -

002 were capable of automatically performing the required safety functions for each of the affected systems.

Additionally, the 3A and 38 RHR pumps, and the A 1 and 81 RHRSW pumps were operable throughout the event, except for the following times:

00 The A 1 RHRSW pump was unavailable for approximately 10.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> on November 23, 2015 due to an impeller adjustment.

The 81 RHRSW pump was unavailable for approximately 3.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> on November 18, 2015 for performance of 3-SR-3.8.1.8, 480V Load Shedding Logic System Functional Test.

The 3A RHR pump was inoperable between November 13, 2015 and November 19, 2015 due to a finding failure of the 3A RHR Pump Motor Breaker Transfer Switch (BFN-3-43-07 4-0005).

The 38 RHR train was unavailable for approximately 19 hours2.199074e-4 days <br />0.00528 hours <br />3.141534e-5 weeks <br />7.2295e-6 months <br /> between November 20, 2015 and November 21, 2015 due to a motor pinion key falling out of a flow control valve (3-FCV-07 4-0073) rendering it unable to open and close, which could have impacted its Suppression Pool and Containment Cooling functions, which both require the valve to open.

Additionally, the RHR Loop II Shutdown Cooling suction valves can not open if this valve is not fully closed.

These systems were restored to operability within their required LCO completion times. Since one redundant train of each affected system remained operable for the duration of the event, this is not a safety system functional failure.

D. Scram with Complications Consideration:

This event did not result in a reactor scram.

VIII. COMMITMENTS

There are no new commitments.

I.

Plant Operating Conditions Before the Event

At the time of discovery, Browns Ferry Nuclear Plant (BFN), Unit 3, was in Mode 5 at 0 percent power. BFN, Units 1 and 2, were unaffected by this event.

II.

Description of Events A. Event:

On February 22, 2016, at 1445 Central Standard Time (CST), during routine maintenance of the Browns Ferry Nuclear (BFN), Unit 3 Core Spray (CS) system [BM], Operations personnel were unable to verify that the Division II CS 3B Pump Automatic Start Signal (3-RL Y-075-14A-K25B) and Valve Automatic Initiation Permissive Signal (3-RL Y-075-14A-K13B) relays [RL Y] were energized. This was due to a breaker [BKR] on the 3ED 4kV Shutdown (SD) Board (BD),

BFN-3-BKR-211-03ED/008, which was found de-energized, preventing the normal automatic startup of the 3B and 30 CS Pumps [P], the 30 Residual Heat Removal (RHR) [BO] pump, and the 01 Residual Heat Removal Service Water (RHRSW) [Bl] pump.

Troubleshooting determined that the NVA relays were de-energized due to a failure of the 6-6C contacts on the MJ(52STA) switch associated with the 3ED 4kV SD BO breaker and a binding of the 52STA Cam Linkage. This was caused by a misalignment of the switch to linkage interface, due to improper installation.

On February 23, 2016, at 1520 CST, the 52STA switch and the 52STA CAM linkage associated with the 3ED 4kV SD BO breaker was declared operable following an inspection, cleaning, and adjustment.

B. Status of structures, components, or systems that were inoperable at the start of the event and that contributed to the event:

There were no structures, systems, or components (SSCs) whose inoperability contributed to this event.

YEAR 2016 -

3. LER NUMBER SEQUENTIAL NUMBER 002

C. Dates and approximate times of occurrences

Dates & Approximate Times October 28, 2015 at 2000 CDT February 20, 2016 at 0518 CST February 22, 2016 at 1445 CST February 23, 2016 at 1520 CST March 1, 2016 at 0704 CST Occurrence Operations satisfactorily completed the Common Accident Signal Logic surveillance (SAT 3-SR-3.8.1.6).

Unit 3 entered Mode 4.

Relays 3-RL Y-211-NVA-D 1 and 3-RL Y-211-NVA-02 on the 3ED 4kV SD BO found to be de-energized when normal power was available during the performance of 3-SR-3.8.1.9(3C), Diesel Generator 3C Emergency Load Acceptance Test.

Operations declared the 3ED 4kV SD BO to be operable following the completion of breaker inspection, cleaning, and adjustment.

The 52STA switch for the 4KV Shutdown Board 3ED/8 was replaced.

D. Manufacturer and model number (or other identification) of each component that failed during the event:

REV NO.

00 The failed component was a 52STA switch in the MJ position of Breaker 3-BKR-211-03ED/008, model number 5-3AF-GEH-250-1200-58.

E. Other systems or secondary functions affected

No other systems or secondary functions were affected by this event.

F. Method of discovery of each component or system failure or procedural error

Failure was discovered during performance of 3-SR-3.8.1.9 (3C), when the NVA-01 and NVA-D2 relays on the 3ED 4kV SD BO were found to be de-energized.

G. The failure mode, mechanism, and effect of each failed component, if known:

Troubleshooting determined that relay 3-RLY-075-14A-K13B was de-energized due to a binding of the 52STA switch and the 52STA Cam Linkage. This binding was due to a misalignment of the 52STA switch and the 52STA Cam Linkage as a result of improper installation.

H. Operator actions

There were no operator actions associated with this event.

I. Automatically and manually initiated safety system responses

There were no automatic or manual safety system responses associated with this event.

Ill.

Cause of the event

A. The cause of each component or system failure or personnel error, if known:

Troubleshooting determined switch failure was caused by a failure of the 6-6C contacts on the 52STA switch, from and a binding of the 52STA Cam Linkage. This binding was caused by a misalignment of the switch to linkage interface, due to improper installation.

8. The cause(s) and circumstances for each human performance related root cause:

00 A review of procedure ECl-O-OOO-SWZ001, Replacement of Type SB switches, which was used to install the 52STA switch found there were no procedural steps for verifying proper alignment between the 52ST A switch and the Breaker 52ST A Switch Cam.

IV.

Analysis of the event

The Tennessee Valley Authority is submitting this report in accordance with Title 10 of the Code of Federal Regulations (10 CFR) 50.73(a)(2)(i)(B), as any operation or condition which was prohibited by the plant's Technical Specifications (TSs). It was determined that the auto-start function for the 3B and 3D CS pumps, 3D RHR pump, and the D1 RHRSW pump was inoperable from October 28, 2015 until February 20, 2016 when Unit 3 entered Mode 4.

BFN, Unit 3, TS 3.3.5.1 requires Emergency Core Cooling System (ECCS) instrumentation for each function in Table 3.3.5.1-1, to be Operable as specified by Table 3.3.5.1-1. When BFN, Unit 3, time delay relay for the CS Band D pumps and the time delay relay for the Low Pressure Coolant Injection (LPCI) RHR pump D is declared inoperable, TS 3.3.5.1 Required Action C.1 requires the supported ECCS features to be declared inoperable when the redundant ECCS initiation capability is inoperable within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> of discovering the loss of initiation capability for features in both divisions when in Modes 1, 2, or 3. Required Action C.2 requires that the inoperable channel be restored to Operable status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. If the inoperable channel cannot be restored to Operable status in the required time period, TS 3.3.5.1 Required Action H.1 requires that the supported ECCS features be declared inoperable immediately. BFN, Unit 3, TS 3.5.1 requires each ECCS injection/spray subsystem and the Automatic Depressurization System (ADS) function of six safety/relief valves to be Operable in Mode 1, and in Modes 2 and 3, except High Pressure Coolant Injection (HPCI) and ADS valves are not required to be operable with reactor steam pressure less than or equal to 150 pounds per square SEQUENTIAL NUMBER 002 REV NO.

00 inch gauge (psig). When the auto-start functions for the 3B and 30 CS pumps and the 30 LPCI RHR pump were disabled, two low pressure ECCS injection or spray subsystems were inoperable. With two or more low pressure ECCS injection or spray subsystems inoperable, TS 3.5.1 Required Action H.1 requires that BFN, Unit 3, immediately enter TS LCO 3.0.3. The auto-start functions for the BFN, Unit 3, 3B and 30 CS pumps, and the 30 LPCI RHR pump were inoperable from October 28, 2015 until February 20, 2016, which was longer than allowed by TS.

BFN, Unit 3, TS LCO 3.7.1 requires eight Operable RHRSW pumps whenever three units are fueled during Modes 1, 2, and 3. With one RHRSW pump inoperable, Required Action A.2 requires the pump be restored to Operable status within 30 days. If the required Completion Times for Condition A is not met, Required Action G.1 requires BFN, Unit 3, to enter Mode 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, and Required Action G.2 requires entering Mode 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The auto-start function for the 01 RHRSW pump was inoperable from October 28, 2015 until February 20, 2016. Based on this evaluation, BFN, Unit 3, operated with one inoperable RHRSW pump for longer than allowed by TS.

During investigation, Operations discovered NVA-01 and NVA-02 relays on the 3ED 4kV SD BO were de-energized. Further investigation revealed this was caused by a failure of the 6-6C contacts on the MJ(52STA) switch associated with breaker BFN-3-BKR-211-03ED/008, which de-energized the NVA-01 and NVA-02 relays.

The last exercising of the 3ED 4kV SD BO breaker and successful actuation of the switch occurred on October 28, 2015, at 2000 Central Daylight Time (CDT), during Common Accident Signal Logic testing. The Past Operability Evaluation concluded that the auto-start function for the 3B and 30 CS pumps, 30 RHR pump, and the 01 RHRSW pump was inoperable from October 28, 2015 to February 20, 2016, when Unit 3 entered Mode 4. The duration of system inoperability was longer than allowed by plant TS 3.3.5.1, TS 3.5.1, and TS 3.7.1.

V.

Assessment of Safety Consequences

This event resulted in BFN, Unit 3, auto-start function for the 3B and 30 CS pumps, 30 RHR pump, and the 01 RHRSW pump being inoperable for longer than allowed by plant TS. The manual start functions were not affected by MJ(52STA) switch failure, and Control Room operators could have manually started these pumps when their failure to automatically start was identified.

The automatic starting capability of these pumps when the 4kV Shutdown Board 3ED is energized from other than normal sources remained available. In addition, automatic start capability of the other Unit 3 CS, RHR, and RHRSW pumps was unaffected by this condition. The Probabilistic Risk Analysis concluded there was negligible increase in risk due to this condition.

A. Availability of systems or components that could have performed the same function as the components and systems that failed during the event:

System availability was not impacted by this event. The operability of the 3A and 3C CS pumps; the 3A, 3B, and 3C RHR pumps; and the A 1, B1, and C1 RHRSW pumps was not affected by this event. Each of these pumps were capable of automatically performing their required safety functions.

B. For events that occurred when the reactor was shut down, availability of systems or components needed to shut down the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident:

During the time the reactor was shutdown, all affected systems remained available to perform their required safety functions.

C. For failure that rendered a train of a safety system inoperable, an estimate of the elapsed time from discovery of the failure until the train was returned to service:

lnoperability of the MJ(52STA) switch on relay 3-RLY-075-14A-K13B was discovered to be inoperable on February 22, 2016 at 1445 hours0.0167 days <br />0.401 hours <br />0.00239 weeks <br />5.498225e-4 months <br /> CST. Operability of the switch was restored on February 23, 2016 at 1520 CST. Because of the failure of the switch, the 3B and 30 CS pumps, the 30 RHR pump and the 01 RHRSW pumps were considered inoperable from October 28, 2015 until February 20, 2016.

VI.

Corrective Actions

Corrective Actions are being managed by TVA's corrective action program under Condition Reports (CRs) 1140776 and 803629.

A. Immediate Corrective Actions

The MJ(52STA) switch on the 3ED 4kV SD BO breaker was replaced, in accordance with Work Order 116560300.

B. Corrective Actions to Prevent Recurrence Instructions to verify proper 52STA switch alignment will be developed. Procedure ECl-O-OOO-SWZ001, Replacement of Type SB switches, will be revised to add steps to verify the proper alignments of the 52STA switch and the Breaker 52STA Switch Cam. This will address the apparent cause, and prevent failures of this type during future 52STA switch installations.

VII. Additional Information

A. Previous Similar Events

A search of the Corrective Action Program for BFN, Units 1, 2, and 3, identified seven MJ(52STA) switch failure events since 2010. These failures were captured by CRs 230836, 328038, 672598, 752488, 792179, 801449, and 980227. These individual failures were collectively evaluated by CR 803629 described below. CR 803629 was written in June 2014 to document the trend of 4 kV breaker's (MJ)52STA stationary contact failures, the same failure that resulted in this event. The cause evaluation for CR 803629 identified two apparent causes.

1. The appropriate preventative maintenance (PM) or pre-emptive replacements were not implemented. The maintenance program only inspected switches for failure, and only took action if the MJ(52STA) switch had failed. This strategy is inadequate with respect to PM, as the associated vendor manuals require contact inspection for wear and burning at regular intervals. Because the existing plant configuration and outage constraints prohibit the performance of a complete cleaning and inspection of Breaker Compartment stationary switches, switch replacement is being implemented on a 24 year frequency to satisfy PM requirements. The 24 year frequency interval was chosen based on engineering judgment and a corrective action review of other similar switches at BFN with component lifetimes of less than 10,000 cycles. An engineering evaluation concluded that this replacement strategy was more conservative than the recommended cleaning and inspection strategy.
2. BFN's elected and documented PM strategy for Medium Voltage Breakers includes the associated switchgear, but the Breaker Program excludes the associated switchgear components. This allows the breaker support components to be overlooked with respect to reliability despite being a vital component to the reliability of the breaker.

The extent of condition review, performed during the causal analysis for CR 803629, identified the 3ED 4kV SD BO breaker in the population of breakers containing MJ(52STA) switches are subject to failure due to age-related degradation. Work orders were created to replace the MJ(52STA) switches in each breaker identified during the extent of condition review.

B. Additional Information

There is no additional information.

C. Safety System Functional Failure Consideration:

In accordance with NUREG-1022, this event is not a safety system functional failure. System availability was impacted by this event. Although the 3B and 30 CS pumps, 30 RHR pump, and the 01 RHRSW pump were considered inoperable during this event, the operability of the 3A and 3C CS pumps, the 3C RHR pump, and the C1 RHRSW pump was not affected. These pumps 2016 -

002 were capable of automatically performing the required safety functions for each of the affected systems.

Additionally, the 3A and 38 RHR pumps, and the A 1 and 81 RHRSW pumps were operable throughout the event, except for the following times:

00 The A 1 RHRSW pump was unavailable for approximately 10.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> on November 23, 2015 due to an impeller adjustment.

The 81 RHRSW pump was unavailable for approximately 3.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> on November 18, 2015 for performance of 3-SR-3.8.1.8, 480V Load Shedding Logic System Functional Test.

The 3A RHR pump was inoperable between November 13, 2015 and November 19, 2015 due to a finding failure of the 3A RHR Pump Motor Breaker Transfer Switch (BFN-3-43-07 4-0005).

The 38 RHR train was unavailable for approximately 19 hours2.199074e-4 days <br />0.00528 hours <br />3.141534e-5 weeks <br />7.2295e-6 months <br /> between November 20, 2015 and November 21, 2015 due to a motor pinion key falling out of a flow control valve (3-FCV-07 4-0073) rendering it unable to open and close, which could have impacted its Suppression Pool and Containment Cooling functions, which both require the valve to open.

Additionally, the RHR Loop II Shutdown Cooling suction valves can not open if this valve is not fully closed.

These systems were restored to operability within their required LCO completion times. Since one redundant train of each affected system remained operable for the duration of the event, this is not a safety system functional failure.

D. Scram with Complications Consideration:

This event did not result in a reactor scram.

VIII. COMMITMENTS

There are no new commitments.