Latest revision as of 18:04, 9 January 2025

Text

DC Cook 2016 Administered Operating Test Scenarios
	ML16341C543
Person / Time
Site:	Cook
Issue date:	12/02/2016
From:	; NRC/RGN-III
To:	; Indiana Michigan Power Co, American Electric Power
Shared Package
ML15274A376	List: ML16341B980; ML16341C428; ML16341C481; ML16341C543;
References
	Download: ML16341C543 (117)
	v • d • e

Appendix D Scenario Outline Form ES-D-1 Cook Plant Units 1 & 2 Page 1 Facility: Cook Plant Scenario No.: NRC 2016-01 Op-Test No.: ______________

Examiners: ________________________

Operators:

Initial Conditions: MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D East MDAFW pump OOS.

Turnover: Stable at 52% power. The unit is shutting down and the reactor must be in Mode 3 within the next 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months due to exceeding the LCO for the East MDAFW pump. It has been out of service to perform motor replacement for 73 hours8.449074e-4 days 0.0203 hours 1.207011e-4 weeks 2.77765e-5 months . Currently in 1-OHP 4021.001.003, Power Reduction.

Event No.

Malf. No.

Event Type*

Event Description 1

N-BOP Swap #1 Control Fluid Pump for #3 Control Fluid Pump 2

R-RO Continue Power Reduction 3

U1_101ACRA1 (Global)

C-BOP TS Loss of Control Room North Air Handling Unit 4

U1_NTP131 to 650°F I-RO TS RCS THOT instrument (NTP-131) fails HIGH 5

U1_FDC_251 to 200 over 15 min.

ramp I-BOP Main Feedwater Pump Delta-P Controller Setpoint fails high over 15 minutes.

6 U1_CV04C C-RO QRV-162 (75 gpm orifice)Fails Closed due to a solenoid fault 7

U1_FW05A Major Trip of East MFP and Loss of ALL Feedwater 8

U1_ED05E M-ALL Loss of Bus T11A due to fault on Bus 1A 9

U1_TC02 U1_RP07A U1_RP07B C-BOP Main Turbine Fails to Trip Auto Steam Line Isolation Failure 10 U1_FW51 U1_FW48C C-BOP TDAFW pump T&TV failure due to blown control power fuse West AFW pump power is lost (East AFW is OOS)

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 2 of 16 Summary The crew is directed to swap Control Fluid pumps due to potential problem with one of the running pumps.

The crew is directed to continue power reduction to shut down.

After the power change, a trip of the North Control Room Air Handling Unit will occur. The crew will need to investigate the cause, start the South Air Handling Unit, and address Technical Specifications.

The next event will involve the RCS Th Inst (NTP-131) fails High. This will result in control rod movement requiring the crew to respond using IFR-001. After disabling the channel rods can be restored.

The MFP Delta P Controller Setpoint fails high over 9 minutes. The crew will be required to respond using IFR-001 and controlling MFP speed in manual.

The next event will involve a failure of letdown orifice failing closed due to a solenoid fault.

The crew will respond and restore letdown to service.

The major event will involve a trip of the East MFP resulting in a loss of all feedwater. The crew will manually trip the reactor. On the trip bus T11Awill be lost due to a fault and the AB EDG will trip causing a loss of one train of power. This will result in a loss of the West MDAFP.

The Main Turbine will fail to trip requiring the closure of the steam stop valves.

The TDAFP will fail to start due to blown control power fuses. This will require a transition to FR-H-1, Loss of Secondary Heat Sink. When heat sink is restored via AFW cross-tie or with the TDAFP (local or repaired), the scenario is complete.

Critical Tasks Manually isolate Steam Lines (turbine trip) prior to ECA-2.1 Establish FW Flow to SG before Bleed and Feed is required Procedures E-0, Reactor Trip or Safety Injection FR-H-1, Loss of Secondary Heat Sink

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 3 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 1 Event

Description:

Swap #1 Control Fluid Pump for #3 Control Fluid Pump Time Position Applicant's Actions or Behavior US Directs use of 1-OHP-4021-050-006, Main and MFP Turbine Control Fluid Operation, Attachment 1, Control Fluid System Operation, Section 4.2, for swapping Control Fluid Pumps.

BOP Places Control Fluid Pump #1 in RUN.

BOP Acknowledges Alarms on MT DCS Ann. Panel:

Drop 179, No Ctrl Fluid Pump in Auto 2 Drop 208, More than 1 CTRL FLD Pump in Manual and Running BOP Places Control Fluid Pump #3 in OFF.

BOP Places Control Fluid Pump #3 in AUTO 2.

BOP Acknowledges Alarms clearing on MT DCS Panel.

RO Provides peer checks during evolution as appropriate.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 4 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 2 Event

Description:

Continue Power Reduction Time Position Applicant's Actions or Behavior RO Calculates boric acid addition per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power reduction.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Reduction in accordance with OHP-4021-001-003.

RO Performs BORATION:

Place RC Makeup Blend Control Switch in STOP.

Place RC Makeup Blend Control Mode Selector Switch in BORATE.

Set desired batch on BA Flow Totalizer.

Adjust BA Flow Ctrl (RU-33) to desired flow.

Place RC Makeup Blend Control Switch in START.

RO Commences power reduction:

Lowers turbine load (reactor power) using HMI.

Maintains Tavg/Tref deviation within limits by boration and turbine load adjustments.

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

BOP/RO BOP acts as peer checker for RO during blender operations and RO verifies appropriate reactivity feedback.

BOP Monitors main electrical generator temperatures.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 5 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 3 Event

Description:

Loss of North Control Room North Air Handling Unit Time Position Applicant's Actions or Behavior BOP Recognizes and reports annunciator on Panel #103, Drop 23, indicative of the loss of the North Control Room Air Handling Unit.

US/BOP Starts the South Control Room Air Handling Unit per OHP-4024-103, Drop 23 annunciator response by placing the South Control Room Air Handling Unit to RUN.

(NOTE: May attempt 1 restart of the North Control Room Air Handling Unit per ARP)

May Place North CRAC in STOP US Refers to Tech Specs (TS):

TS 3.7.11 Control Room Air Conditioning (CRAC) System (Condition A) due to a loss of 1 cooling system. Restore in 30 Days

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 6 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Ann. Panel 111 which are indicative of a RCS RTD failure. (Drops 3,4, 10)

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place rod control in manual after verifying no runback in progress, if previously in auto.

Identifies that PRZ Program Level is affected by this failure and Place PRZ level control to manual US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 01-OHP-4022-012-003, Continuous Control Bank Movement procedure, if rods moved.

RO If 1-OHP-4022-012-003 is entered, then performs the following as directed:

1. Checks rod position above low-low rod insertion limit Note: Delta T failure affects RIL Setpoint - Must use COLR or manually calculate. (1.89 * % thermal Power ~ 98 Steps)

2. Checks axial flux difference (AFD) within target band

3. Initiates restoration of equilibrium conditions using either:

Control rod movement Turbine load adjustment (Turbine on Tavg-Tref Hold until channel is defeated)

Boron adjustment

4. Identifies failed RTD channel US Enters and directs actions of 1-OHP-4022-013-007, RCS RTD Instrument Malfunction procedure.

Continued on next page

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 7 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO

1. Ensures control rods are in manual.

2. Reports Loop 3 as failed RCS temperature channel and aligns the following switches: (This will clear Turbine hold)

Tavg defeat switch to Loop 3 position T defeat switch to Loop 3 position T/OPT/OTT recorder switch to Loop 1,2, or 4

3. Verifies PZR Level Control in Auto US Notifies SM/MTI to trip bistables associated with RCS loop 3 RTD failure per Attachment C of 1-OHP 4022-013-007.

US Refers to TS LCO:

TS 3.3.1, Reactor Trip System (RTS) Instrumentation (Table 3.3.1-1) o Function 6, Overtemperature T. Condition D o Function 7, Overpower T. Condition D TS 3.3.2, Engineered Safety Feature Actuation System (ESFAS)

Instrumentation (Table 3.3.2-1) o Function 4e, Steam Line Isolation - High Steam Flow in Two Steam Lines (per steam line), Coincident with Tavg - Low Low Condition D o Function 8c, ESFAS Interlocks - Tavg - Low Low, P-12.

Condition D May refer to the following if LEFM readings are Magenta on PPC TRM 8.7.14, Leading Edge Flow Meter (Mode 1 > 3250 MWth applicability)- N/A

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 8 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 5 Event

Description:

Main Feedwater Pump Delta-P Controller Setpoint Fails High Time Position Applicant's Actions or Behavior Note:

Malfunction will cause the Total Steam Flow summing unit for the Feed Pump Delta-P circuit to fail low thus driving the Delta-P setpoint high.

BOP Recognizes and reports annunciator on Ann. Panel 115, Drop 42, FPT DCS Trouble, and indications of a failure affecting main feedwater to all steam generators (SGs):

Main FW Pump Differential Pressure Controller.

May Identify All feedwater regulating valves closing.

Main feedwater pump speed rising.

Note: Ann. OHP-4024-DCS-MFP, Drop C-10, DP SETPOINT STEAM FLOW XMTR FAIL, Also contains actions to address setpoint failure. (ALM point 2010 on DCS Screen)

BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Verifies/Places Main FW Pump to speed control in manual and lowers output (MFW Pump Speed) to restore DP and match feedwater flow with steam flow and restore SG levels to program.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

CREW Identifies that Main Feedwater Pump Delta-P Controller Setpoint has failed high.

BOP Monitors/adjusts MFP differential pressure (via manual control of FWP Delta-P or Main FW Pump Speed controllers) to while maintaining SG levels at program.

RO Monitors nuclear power during feedwater transient.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 9 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 6 Event

Description:

75 GPM Letdown Orifice Valve (QRV-162) Fails Closed Time Position Applicant's Actions or Behavior RO Identifies and reports rise in pressurizer (PRZ) or lowering VCT level due to a loss of letdown flow as a result of QRV-162 failing closed.

US/RO Minimizes charging flow to that amount required for seal injection.

NOTE If required, Shift Manager will direct that normal letdown (75 gpm) be re-established.

US Directs RO to restore normal letdown (using QRV-161, 75 gpm letdown orifice) per 1-OHP-4021-003-001, Attachment 13.

RO Restores normal letdown per Attachment 13, Section 4.1 as follows:

1. Places QRV-302 in divert position.

2. Verifies orifice isolations closed (QRV-160, 161 and 162).

3. Adjusts CRV-470 controller to >50% output.

4. Verifies open letdown isolation valves:

a. QCR-300, CVCS letdown cntmt isol

b. QCR-301, CVCS letdown cntmt isol

c. QRV-111, RC letdown to regen hx

d. QRV-112, RC letdown to regen hx

5. Adjusts QRV-301 controller to 50% output.

6. Checks/adjusts charging flow to > 75 gpm.

7. Opens QRV-161, 75 gpm letdown orifice isolation.

8. Adjusts QRV-301 to maintain 160 - 350 psig on QPC-301.

9. Places QRV-301 in auto (if desired).

10. Nulls and returns CRV-470 controller to auto.

11. Adjusts charging flow as required to maintain PRZ level.

12. Places PRZ level control in automatic (if desired).

13. Places QRV-302 in normal (demin) position when letdown temperature is stable.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 10 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior RO/US Determines that a loss of feedwater is occurring based on the following:

Both FW pumps tripped

SG level change

FW & Steam flow mismatch US Directs RO to manually trip the reactor Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection RO Performs the (primary) immediate actions of E-0:

1. Checks reactor trip

2. Checks safety injection status US/BOP Critical Task #1 Performs the (secondary) immediate actions of E-0:

1. Checks Turbine Trip Determines that ALL Turbine Stop Valves are NOT Closed Attempts manual turbine trip via the Solenoid Trip.

Attempts to manually actuate AMSAC

2. Determines that Turbine did NOT trip.

3. Isolates SG Stop Valves and Stop Valve Dump Valves BOP Checks power to AC emergency buses Reports loss of 4KV Bus T11A (due to fault) and T11B Reports trip of AB EDG (due to bus fault)

US Ensures immediate actions of E-0 are completed.

Crew Determines SI has NOT Actuated and is Not Required Checks AFW Flow and Announces Transition to ES-0.1 US Determines that No AFW pumps are running requiring transition to FR-H.1 based on a Red Path after exiting E-0

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 11 of 16 Op-Test No.:

Scenario No.: NRC 2016-01 Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to Fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior US Announces transition to FR-H.1, Response to Loss of Secondary Heat Sink.

RO/BOP Reviews foldout page for FR-H.1, Response to Loss of Secondary Heat Sink.

US Directs actions of FR-H.1, Response to Loss of Secondary Heat Sink.

US/RO Verifies Bleed and Feed initiation is not required:

Recognizes one CCP available SG WR Levels > 32%

PRZ Pressure < 2335 psig US/BOP Critical Task #2 Attempts to establish secondary heat sink to one SG:

Starts TDAFP from Control Room or Locally Opens TDAFP FMOs to Obtain total feed flow > 240E3 PPH (FMO-211, 221, 231, 241 are normally throttled open but less than required minimum).

OR Establish Crosstie to Unit 2 per OHP-4022--055-003 Attachment A Close U1 FMO-212 & FMO-242 Direct U2/AEO to perform steps to :

Close U2 FMO-222, FMO232, FRV-255 & Test Valve Air Open of Crosstie 2-FW-129 Start U2 East AFW Pump Throttle U1 FMO-212 & FMO-242 to Feed SGs US Announces transition to E-0, Reactor Trip or Safety Injection.

TERMINATE SCENARIO

Appendix D Critical Task Summary Form ES-D-2 (NRC 2016-01)

Cook Plant Units 1 & 2 Page 12 of 16 Task Elements Results

1 Manually Trip/Isolate Main Turbine Cueing:

All turbine stop valves closed status lights - LIT (E-0, Step 2)

Performance Indicators:

Manually Isolate Main Steam Lines

Must be performed prior to:

o ECA-2.1 Entry o FR-S Series Entry Performance Feedback:

Main Steam Lines Isolated o MRV-210 o MRV-220 o MRV-230 o MRV-240 SAT / UNSAT

2 Establish FW Flow to SG prior to Bleed and Feed Cueing:

AFW flow < 240,000 PPH

NR SG Levels OFFSCALE LOW Performance Indicators:

Establish AFW flow to SG >240,000 PPH

Must be performed prior to:

SG Dryout (<17% wide range level)

Exceeding RCS safety valve limit (2485 psig)

Performance Feedback:

AFW or FW flow indicated to SGs

CETCs - lowering SAT / UNSAT

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

Cook Plant Units 1 & 2 Page 13 of 16 Setup:

1. Reset to IC-731 MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D East MDAFW pump OOS.

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Tagout 1E MDAFP as follows:

Place control switch in pull-to-lock Place clearance tag on control switch Activate FWR61, final value RO

6. Activate the following (pre-load) malfunctions:

TC02, Main Turbine Fails to Trip FW48C, Failure of TDAFWP AUTO start RP07A, Train A Steamline Isolation fails to AUTO actuate RP07B, Train B Steamline Isolation fails to AUTO actuate

7. Assign file U1ReactorTripBreaker to event #9:

FW51, TDAFWP T&TV blown control fuse ED05E, T11A Bus fault U1_TC02 U1ReactorTripBreaker to U1_FW48C U1_FW51 U1_FWR61 U1_ED05E - On Trig 9 U1_RP07A U1_RP07B

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

Cook Plant Units 1 & 2 Page 14 of 16 Scenario:

EVENT #1 If required, Local Control Fluid Temperature is 124°F EVENT #2 (if desired to use Rod Motion to perform power change insert event 4 prior to placing rods in Manual for power change)

No Additional Actions EVENT #3 Insert Global malfunction U1_101ACRA1 (Loss of Control Room North Air Handling Unit) after crew has performed a power change.

If contacted as AEO to investigate the North Air Handling Unit Trip, report back after ~ 2 min. delay that Breaker 1-AB-D-2D has an OC trip.

EVENT #4 ICF U1_NTP131 to 650 over 5 sec to cause the Loop 3 Hot Leg RTD to fail high.

EVENT #5 (consider entering this Malfunction with event 4)

ICF U1_FDC_251 to 200 over 15 minutes to cause the Main FWP Delta Pressure Setpoint to fail high.

EVENT #6 IMF CV04C, to cause QRV-162, 75 gpm letdown orifice to fail closed ).

If desired, direct the Crew as the SM to restore ONLY 75 GPM letdown using section 4.1 of Attachment

13.

U1_FDC_251 U1_101ACRA1 U1_NTP131 U1_CV04C

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

Cook Plant Units 1 & 2 Page 15 of 16 EVENT #7 ICF U1_FW05A to cause the East Main FW Pump to Trip.

EVENT # 8,9,10 Turbine Trip fails to AUTO actuate (Pre-Loaded)

Steam Line Isolation fails to AUTO actuate (Pre-Loaded)

TD AFW pump fails to start (Pre-Loaded)

After FR-H.1 determination that Bleed & Feed is NOT required, report as the AEO and/or Maintenance that T&TV appears to be functional with NO physical damage evident, but the fuse was blown and has been replaced. Or Inform the Crew that the U2 AFW is ready to Start.

DMF FW51 to replace the blown fuse.

OR Start TDAFP Locally To Provide AFW through Crosstie to Unit 2 To Simulate Closing U2_FMO-212 and FMO-242 (Close Manual Isolations) - FRV-255 is closed Open U1 AFW to U2 Cosstie 1-FW-129 and Start u2 West AFW U1_QT506ACT U1_FWR06 U2_FWR47 U1_FW51 U2_FWR44 ZGI101TA2_U2 U1_FW05A

Appendix D Simulator Instructions Form ES-D-2 (NRC 2016-01)

Cook Plant Units 1 & 2 Page 16 of 16 Local actions after entry into E-0:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

Aux Tour will monitor Spent Fuel Pool Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

Report Control Room Damper Positions ACRDA-1A, ACRDA-2 are closed. ACRDA-3 is open.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR03A U1_CHR01 U1_EGR04B U1_EGR03A U1_CHR03 U1_EGR04A U1_EGR03B U1_EGR04B U1_EGR04A U1_EGR03B U1_CHR02

Appendix D Scenario Outline Form ES-D-1 Facility: Cook Plant Scenario No.: NRC 2016-01(a)

Op-Test No.: 2016 NRC ILE Examiners: ________________________

Operators:

Initial Conditions: MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D, East MDAFW pump OOS.

Turnover: Stable at 52% power. The unit is shutting down and the reactor must be in Mode 3 within the next 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months due to exceeding the LCO for the East MDAFW pump. It has been out of service to perform motor replacement for 73 hours8.449074e-4 days 0.0203 hours 1.207011e-4 weeks 2.77765e-5 months . Currently in 1-OHP 4021.001.003, Power Reduction.

Event No.

Malf. No.

Event Type*

Event Description 1

N-BOP Swap #1 Control Fluid Pump for #3 Control Fluid Pump 2

R-RO Continue Power Reduction 3

U1_101ACRA1 (Global)

C-BOP TS Loss of Control Room North Air Handling Unit 4

U1_NTP131 to 650°F I-RO TS RCS THOT instrument (NTP-131) fails HIGH 5

U1_FDC_251 to 200 over 15 min.

ramp I-BOP Main Feedwater Pump Delta-P Controller Setpoint fails high over 15 minutes. DELETED 6

U1_CV04C C-RO QRV-162 (75 gpm orifice) Fails Closed due to a solenoid fault 7

U1_FW05A M-ALL Trip of East MFP and Loss of ALL Feedwater 8

U1_ED05E M-ALL Loss of Bus T11A due to fault on Bus 1A 9

U1_TC02 U1_RP07A U1_RP07B C-BOP Main Turbine Fails to Trip/Auto Steam Line Isolation Failure 10 U1_FW51 U1_FW48C C-BOP TDAFW pump T&TV failure due to blown control power fuse West AFW pump power is lost (East AFW is OOS)

(N)ormal, (R)eactivity, (I)nstrument, (C) omponent, (M)ajor

Appendix D Scenario Outline Form ES-D-1 Summary The crew is directed to swap Control Fluid pumps due to potential problem with one of the running pumps.

The crew is directed to continue power reduction to shut down.

After the power change, a trip of the North Control Room Air Handling Unit will occur. The crew will need to investigate the cause, start the South Air Handling Unit, and address Technical Specifications.

The next event will involve the RCS Th Inst (NTP-131) fails High. This will result in control rod movement requiring the crew to respond using IFR-001. After disabling the channel rods can be restored.

The MFP Delta P Controller Setpoint fails high over 9 minutes. The crew will be required to respond using IFR-001 and controlling MFP speed in manual.

The next event will involve a failure of letdown orifice failing closed due to a solenoid fault.

The crew will respond and restore letdown to service.

The major event will involve a trip of the East MFP resulting in a loss of all feedwater. The crew will manually trip the reactor. On the trip bus T11Awill be lost due to a fault and the AB EDG will trip causing a loss of one train of power. This will result in a loss of the West MDAFP.

The Main Turbine will fail to trip requiring the closure of the steam stop valves.

The TDAFP will fail to start due to blown control power fuses. This will require a transition to FR-H-1, Loss of Secondary Heat Sink. When heat sink is restored via AFW cross-tie or with the TDAFP (local or repaired), the scenario is complete.

Critical Tasks Manually isolate Steam Lines (turbine trip) prior to ECA-2.1 Establish FW Flow to SG before Bleed and Feed is required Procedures E-0, Reactor Trip or Safety Injection FR-H-1, Loss of Secondary Heat Sink

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 3 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 1 Event

Description:

Swap #1 Control Fluid Pump for #3 Control Fluid Pump Time Position Applicant's Actions or Behavior US Directs use of 1-OHP-4021-050-006, Main and MFP Turbine Control Fluid Operation, Attachment 1, Control Fluid System Operation, Section 4.2, for swapping Control Fluid Pumps.

BOP Places Control Fluid Pump #1 in RUN.

BOP Acknowledges Alarms on MT DCS Ann. Panel:

Drop 179, No Ctrl Fluid Pump in Auto 2 Drop 208, More than 1 CTRL FLD Pump in Manual and Running BOP Places Control Fluid Pump #3 in OFF.

BOP Places Control Fluid Pump #3 in AUTO 2.

BOP Acknowledges Alarms clearing on MT DCS Panel.

RO Provides peer checks during evolution as appropriate.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 4 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 2 Event

Description:

Continue Power Reduction Time Position Applicant's Actions or Behavior RO Calculates boric acid addition per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power reduction.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Reduction in accordance with OHP-4021-001-003.

RO Performs BORATION:

Place RC Makeup Blend Control Switch in STOP.

Place RC Makeup Blend Control Mode Selector Switch in BORATE.

Set desired batch on BA Flow Totalizer.

Adjust BA Flow Ctrl (RU-33) to desired flow.

Place RC Makeup Blend Control Switch in START.

RO Commences power reduction:

Lowers turbine load (reactor power) using HMI.

Maintains Tavg/Tref deviation within limits by boration and turbine load adjustments.

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

BOP/RO BOP acts as peer checker for RO during blender operations and RO verifies appropriate reactivity feedback.

BOP Monitors main electrical generator temperatures.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 5 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 3 Event

Description:

Loss of North Control Room North Air Handling Unit Time Position Applicant's Actions or Behavior BOP Recognizes and reports annunciator on Panel #103, Drop 23, indicative of the loss of the North Control Room Air Handling Unit.

US/BOP Starts the South Control Room Air Handling Unit per OHP-4024-203, Drop 23 annunciator response by placing the South Control Room Air Handling Unit to RUN.

(NOTE: May attempt 1 restart of the North Control Room Air Handling Unit per ARP)

US Refers to Tech Specs (TS):

TS 3.7.11 Control Room Air Conditioning (CRAC) System (Condition A) due to a loss of 1 cooling system.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 6 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Ann. Panel 111 which are indicative of a RCS RTD failure.

RO/BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place rod control in manual after verifying no runback in progress, if previously in auto.

Identifies that PRZ Program Level is affected by this failure.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of 01-OHP-4022-012-003, Continuous Control Bank Movement procedure, if rods moved.

RO If 1-OHP-4022-012-003 is entered, then performs the following as directed:

1. Checks for no turbine runback

2. Ensures control rods are in manual with no rod motion

3. Checks rod position above low-low rod insertion limit Note: Delta T failure may affect RIL Setpoint - Must use COLR or manually calculate.

4. Checks axial flux difference (AFD) within target band

5. Initiates restoration of equilibrium conditions using either:

Control rod movement Turbine load adjustment Boron adjustment

6. Identifies failed RTD channel US Enters and directs actions of 1-OHP-4022-013-007, RCS RTD Instrument Malfunction procedure.

Continued on next page

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 7 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 4 Event

Description:

Loop 3 RCS Hot Leg Temperature Transmitter (NTP-131) Fails High Time Position Applicant's Actions or Behavior RO

1. Ensures control rods are in manual.

2. Reports Loop 3 as failed RCS temperature channel and aligns the following switches:

Tavg defeat switch to Loop 3 position T defeat switch to Loop 3 position T/OPT/OTT recorder switch to Loop 1,2, or 4 US Initiates actions to trip bistables associated with RCS loop 3 RTD failure per Attachment C of 1-OHP 4022-013-007.

US Refers to TS LCO:

TS 3.3.1, Reactor Trip System (RTS) Instrumentation (Table 3.3.1-1) o Function 6, Overtemperature T. Condition D o Function 7, Overpower T. Condition D TS 3.3.2, Engineered Safety Feature Actuation System (ESFAS)

Instrumentation (Table 3.3.2-1) o Function 4e, Steam Line Isolation - High Steam Flow in Two Steam Lines (per steam line), Coincident with Tavg - Low Low Condition D o Function 8c, ESFAS Interlocks - Tavg - Low Low, P-12.

Condition D May refer to the following if LEFM readings are Magenta on PPC TRM 8.7.14, Leading Edge Flow Meter (Mode 1 > 3250 applicability)

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 8 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 5 Event

Description:

Main Feedwater Pump Delta-P Controller Setpoint Fails High Time Position Applicant's Actions or Behavior Note:

Malfunction will cause the Total Steam Flow summing unit for the Feed Pump Delta-P circuit to fail low thus driving the Delta-P setpoint high.

BOP Recognizes and reports annunciator on Ann. Panel 115, Drop 42, FPT DCS Trouble, and indications of a failure affecting main feedwater to all steam generators (SGs):

Main FW Pump Differential Pressure Controller.

May Identify All feedwater regulating valves closing.

Main feedwater pump speed rising.

Note: Ann. OHP-4024-DCS-MFP, Drop C-10, DP SETPOINT STEAM FLOW XMTR FAIL, contains actions to address setpoint failure.

RO/BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Verifies/Places Main FW Pump to speed control in manual and lowers output (MFW Pump Speed) to restore DP and match feedwater flow with steam flow and restore SG levels to program.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

CREW Identifies that Main Feedwater Pump Delta-P Controller Setpoint has failed high.

BOP Monitors/adjusts MFP differential pressure (via manual control of FWP Delta-P or Main FW Pump Speed controllers) to while maintaining SG levels at program.

RO Monitors nuclear power during feedwater transient.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 9 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 6 Event

Description:

75 GPM Letdown Orifice Valve (QRV-162) Fails Closed Time Position Applicant's Actions or Behavior RO Identifies and reports rise in pressurizer (PRZ) or lowering VCT level due to a loss of letdown flow as a result of QRV-162 failing closed.

US/RO Minimizes charging flow to that amount required for seal injection.

NOTE If required, Shift Manager will direct that normal letdown (75 gpm) be re-established.

US Directs RO to restore normal letdown (using QRV-161, 75 gpm letdown orifice) per 1-OHP-4021-003-001, Attachment 13.

RO Restores normal letdown per Attachment 13, Section 4.1 as follows:

1. Places QRV-302 in divert position.

2. Verifies orifice isolations closed (QRV-160, 161 and 162).

3. Adjusts CRV-470 controller to >50% output.

4. Verifies open letdown isolation valves:

a. QCR-300, CVCS letdown cntmt isol

b. QCR-301, CVCS letdown cntmt isol

c. QRV-111, RC letdown to regen hx

d. QRV-112, RC letdown to regen hx

5. Adjusts QRV-301 controller to 50% output.

6. Checks/adjusts charging flow to > 75 gpm.

7. Opens QRV-161, 75 gpm letdown orifice isolation.

8. Adjusts QRV-301 to maintain 160 - 350 psig on QPC-301.

9. Places QRV-301 in auto (if desired).

10. Nulls and returns CRV-470 controller to auto.

11. Adjusts charging flow as required to maintain PRZ level.

12. Places PRZ level control in automatic (if desired).

13. Places QRV-302 in normal (demin) position when letdown temperature is stable.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 10 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior RO/US Determines that a loss of feedwater is occurring based on the following:

Both FW pumps tripped

SG level change

FW & Steam flow mismatch US Directs RO to manually trip the reactor Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection RO Performs the (primary) immediate actions of E-0:

1. Checks reactor trip

2. Checks safety injection status US/BOP Critical Task #1 Performs the (secondary) immediate actions of E-0:

1. Checks Turbine Trip Determines that ALL Turbine Stop Valves are NOT Closed Attempts manual turbine trip via the Solenoid Trip.

Attempts to manually actuate AMSAC

2. Determines that Turbine did NOT trip.

3. Isolates SG Stop Valves and Stop Valve Dump Valves BOP Checks power to AC emergency buses Reports loss of 4KV Bus T11A (due to fault) and T11B Reports trip of AB EDG (due to bus fault)

US Ensures immediate actions of E-0 are completed.

Crew Determines SI has Actuated Crew Performs E-0 Actions as directed Perform Attachment A Attempt to restore AFW US Determines that No AFW pumps are running requiring transition to FR-H.1 at Step 10 RNO.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 11 of 16 Op-Test No.:

Scenario No.: NRC 2016-01(a)

Event No.: 7/8/9/10 Event

Description:

Loss of Bus T11A due to Fault; Failure of Turbine Trip; Loss of control power to TDAFP T&TV & Trip of West MDAFP Time Position Applicant's Actions or Behavior US Announces transition to FR-H.1, Response to Loss of Secondary Heat Sink.

RO/BOP Reviews foldout page for FR-H.1, Response to Loss of Secondary Heat Sink.

US Directs actions of FR-H.1, Response to Loss of Secondary Heat Sink.

US/RO Verifies Bleed and Feed initiation is not required:

Recognizes one CCP available SG WR Levels > 32%

PRZ Pressure < 2335 psig US/BOP Critical Task #2 Attempts to establish secondary heat sink to one SG:

Starts TDAFP from Control Room or Locally Opens TDAFP FMOs to Obtain total feed flow > 240E3 PPH (FMO-211, 221, 231, 241 are normally throttled open but less than required minimum).

OR Establish Crosstie to Unit 2 per OHP-4022--055-003 Attachment A Close U1 FMO-212 & FMO-242 Direct U2/AEO to perform steps to :

Close U2 FMO-222, FMO232, FRV-255 & Test Vale Air Open of Crosstie 2-FW-129 Start U2 East AFW Pump Throttle U1 FMO-212 & FMO-242 to Feed SGs US Announces transition to E-0, Reactor Trip or Safety Injection.

TERMINATE SCENARIO

Critical Task Summary (NRC 2016-01(a))

Cook Plant Unit 1 & 2 Page 12 of 16 Task Elements Results

1 Manually Trip/Isolate Main Turbine Cueing:

All turbine stop valves closed status lights - LIT (E-0, Step 2)

Performance Indicators:

Manually Isolate Main Steam Lines

Must be performed prior to:

o ECA-2.1 Enry o FR-S Series Entry Performance Feedback:

Main Steam Lines Isolated o MRV-210 o MRV-220 o MRV-230 o MRV-240 SAT / UNSAT

2 Establish FW Flow to SG prior to Bleed and Feed Cueing:

AFW flow < 240,000 PPH

NR SG Levels OFFSCALE LOW Performance Indicators:

Establish AFW flow to SG >240,000 PPH

Must be performed prior to:

SG Dryout (<17% wide range level)

Exceeding RCS safety valve limit (2485 psig)

Performance Feedback:

AFW or FW flow indicated to SGs

CETCs - lowering SAT / UNSAT

Simulator Instructions (NRC 2016-01(a))

Cook Plant Unit 1 & 2 Page 13 of 16 Setup:

1. Reset to IC-315 MOL; 52% power, 521 MW, 945.8 ppm, 588 F 178 Steps on D East MDAFW pump OOS.

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Advance chart recorder paper & clear chart recorder memory.

5. Tagout 1E MDAFP as follows:

Place control switch in pull-to-lock Place clearance tag on control switch Activate FWR61, final value RO

6. Activate the following (pre-load) malfunctions:

TC02, Main Turbine Fails to Trip FW48C, Failure of TDAFWP AUTO start

7. Assign file U1ReactorTripBreaker to event #9:

FW51, TDAFWP T&TV blown control fuse ED05E, T11A Bus fault U1ReactorTripBreaker to U1_ED05E - On Trig 9 U1_TC02 U1_FW48C U1_FWR61 U1_FW51

Simulator Instructions (NRC 2016-01(a))

Cook Plant Unit 1 & 2 Page 14 of 16 Scenario:

EVENT #1 If required, Local Control Fluid Temperature is 124°F EVENT #2 (if desired to use Rod Motion to perform power change insert event 4 prior to placing rods in Manual for power change)

No Additional Actions EVENT #3 Insert Global malfunction U1_101ACRA1 (Loss of Control Room North Air Handling Unit) after crew has performed a power change.

If contacted as AEO to investigate the North Air Handling Unit Trip, report back after ~ 2 min. delay that Breaker 1-AB-D-2D has an OC trip.

EVENT #4 ICF U1_NTP131 to 650 over 5 sec to cause the Loop 3 Hot Leg RTD to fail high.

EVENT #5 ICF U1_FDC_251 to 200 over 15 minutes to cause the Main FWP Delta Pressure Setpoint to fail high.

EVENT #6 After crew has demonstrated ability to raise power, THEN insert IMF CV04C, to cause QRV-162, 75 gpm letdown orifice to fail closed).

If desired, direct the Crew as the SM to restore ONLY 75 GPM letdown using section 4.1 of 3.

U1_CV04C U1_FDC_251 U1_NTP131 U1_101ACRA1

Simulator Instructions (NRC 2016-01(a))

Cook Plant Unit 1 & 2 Page 15 of 16 EVENT #7 ICF U1_FW05A to cause the East Main FW Pump to Trip.

EVENT # 8,9,10 Turbine Trip fails to AUTO actuate (Pre-Loaded)

Steam Line Isolation fails to AUTO actuate (Pre-Loaded)

TD AFW pump fails to start (Pre-Loaded)

After FR-H.1 determination that Bleed & Feed is NOT required, report as the AEO and/or Maintenance that T&TV appears to be functional with NO physical damage evident, but the fuse was blown and has been replaced. Or Inform the Crew that the U2 AFW is ready to Start.

DMF FW51 to replace the blown fuse.

OR Start TDAFP Locally To Provide AFW through Crosstie to Unit 2 To Simulate Closing U2_FMO-212 and FMO-242 (Close Manual Isolations) - FRV-255 is closed Open U1 AFW to U2 Crosstie 1-FW-129 and Start u2 West AFW U2_FWR44 U1_QT506ACT U1_FW51 ZGI101TA2_U2 U2_FWR47 U1_FW05A U1_FWR06

Simulator Instructions (NRC 2016-01(a))

Cook Plant Unit 1 & 2 Page 16 of 16 Local actions after entry into E-0:

Perform Local actions after entry into E-0 as requested:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

Aux Tour will monitor Spent Fuel Pool Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

Report Control Room Damper Positions ACRDA-1A, ACRDA-2 are closed. ACRDA-3 is open.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR04B U1_CHR03 U1_CHR01 U1_EGR03B U1_CHR02 U1_EGR04A U1_EGR03A U1_EGR03B U1_EGR04B U1_EGR04A U1_EGR03A

Appendix D Scenario Outline Form ES-D-1 Cook Plant Units 1 & 2 Page 1 Facility: Cook Plant Scenario No.: NRC 2016-02 Op-Test No.: ________

Examiners: _________________

Operators: ___________________

Initial Conditions: MOL, 80% power, 888 MW, 864 ppm, 565.7 F 198 Steps on D Turnover: Raise Power to 100%

Event No.

Malf. No.

Event Type*

Event Description 1

U1_QLC451@ 0 I-RO TS VCT Level Transmitter (QLC-451) fails LOW 2

R-RO Raise Turbine and Reactor Power 3

U1_QTC302@

175°F C-RO Letdown Temperature Controller fails High 4

U1_FFC220 @ 2 I-BOP TS SG Feed Flow Instrument (FFC-220) fails LOW 5

U1_RC16 to 100% over 2 min. ramp M - ALL Pressurizer Steam Space Manway Leak 6

U1_TC03 C-BOP Failure of Main Turbine Auto Trip 7

U1_RP20C U1_ECP C-RO Slave Relay Failure (CCP,CCW,SI,RH pumps dont auto start)

East CCP trips

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 2 of 14 Summary The crew is directed to begin raising power to 100%.

Before the power rise has begun, the VCT Level instrument (QLC-451) failing LOW. This will result in the VCT Low Level alarm and auto makeup. The crew will be required to enter the AOP and address the Technical Requirements Manual. The RO will be required to terminate the auto makeup to RCS.

After an acceptable power change, the Letdown Temperature Controller failing High in AUTO.

This will result in excessive letdown cooling. RO will be required to take manual control of CRV-470 and restore temperature to normal band.

The fourth event will involve a failure of #2 Steam Generator Feed Flow instrument (FFC-220)

LOW. This will result in a rise in feedwater flow to #2 SG with corresponding SG level rise.

The BOP will be required to take manual control of FRV-220. Crew will be required to implement AOP actions to stabilize the plant and address Technical Specifications.

The major event will involve a large leak on the PRZ Steam Space Manway. A unit trip will be required. As the crew performs the actions of E-0, the Main Turbine will fail to automatically trip. Additionally the East CCP will trip and a failure of the opposite train slave relay will require manually stating the West CCP and other ECCS equipment. The crew will transition to E-1. The scenario will terminate when the crew has transitioned to ES-1.2 for Post LOCA cooldown.

Critical Tasks Manually trip the Turbine prior to a transition to ECA-2.1 Stop all running RCPs when RCS pressure is below 1300 psig Procedures E-0, Reactor Trip or Safety Injection E-1, Loss of Reactor or Secondary Coolant

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 3 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 1 Event

Description:

VCT Level Transmitter (QLC-451) fails LOW Time Position Applicant's Actions or Behavior RO Recognizes indication(s) of VCT Level problem and reports annunciators:

Panel #109 Drop 49 - VCT Level Low RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Places RC Makeup Control to Stop US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-017, VCT Level Malfunction RO Report failure of VCT Level Transmitter (QLC-451) to US Perform MANUAL blend operation to maintain VCT level in band, if required US Informs SM/MTI that Interposing Relay must be energized in accordance with Attachment A US Refers to the following Tech Requirements:

TRM 8.1.1, Boration Systems Operating - Condition A - 72 Hr (Interposing Relay is energized for Refueling Water Sequence)

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 4 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 2 Event

Description:

Raise Turbine Load/Reactor Power Time Position Applicants Actions or Behavior RO Calculates the dilution required per OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power escalation.

US Reviews / concurs with reactivity plan.

US Directs RO to commence Power Escalation in accordance with OHP-4021-001-006, Power Escalation (at step 4.77)

RO Performs DILUTION (batch add OR Continuous):

Place RC Makeup Blend Control Mode switch in DILUTE or ALT DILUTE Adjust PW to the desired flow rate and/or amount.

May close QRV-451 if aligning to CCP Suction Only Place RC Makeup Blend control switch in START May take QRV-303 to Manual and Open as required to maintain VCT Level and Pressure.

RO Commences escalation:

Raises turbine load (reactor power) using the DCS HMI.

Maintains Tavg/Tref deviation within limits by dilution and turbine load adjustments.

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

RO RO verifies appropriate reactivity feedback.

BOP Acts as peer checker for RO during blender operations.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 5 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 3 Event

Description:

CVCS Letdown Temperature Controller (QTC-302) output fails High.

Time Position Applicant's Actions or Behavior RO Recognize and reports annunciator Panel 109 alarms which indicates a problem with CCW cooling to the letdown heat exchanger:

Drop 8, Letdown HX Outlet Temp High (a failed high transmitter causes excessive cooling to letdown)

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Places CRV-470, Letdown Temperature Control valve, controller to MANUAL.

Positions CRV-470 and restores letdown temperature to normal.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

RO May dispatch operator to obtain a local temperature reading and/or valve position.

Identifies that QTC-302 has failed high Determines condition NOT due to makeup US Initiates action to have MTI investigate problem with letdown temperature controller/indicator.

NOTE:

QRV-302 Letdown Demineralizer Divert Valve will reposition based on QTS-301. Diverts past Demins at 143°F. This is a separate switch from the Controller & Instrument that has failed (QTC-302).

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 6 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 4 Event

Description:

SG #2 Feedwater Flow Transmitter (FFC-220) Fails LOW Time Position Applicant's Actions or Behavior BOP Recognizes and reports annunciators on Panel #113 Drop 32, Steam Generator 2 Water LVL HI Deviation Drop 43, Steam Generator 2 SF > FWF Mismatch BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Verifies FRV-220, SG #2 MFW Reg. Valve controller in manual Lowers controller output to match the operable feed flow channel with steam flow.

Restores SG #2 level to program.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-015, Feedwater Flow Instrument Malfunction procedure.

BOP Performs the following actions as directed:

1. Reports FFC-220 has failed low

2. Places FS-520-C selector switch in channel 2 position.

3. Nulls and returns FRV-220 controller to auto.

US Refers to Tech Specs 3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 15, Condition D). Trip Bistables in 6 Hr US Notifies SM/MTI to Initiate actions to trip bistables associated with FFC-220 FW Flow Failure per Attachment B-1 of OHP-4022-013-015.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 7 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior RO Receives Alarms on Panel 104 Drop 41, 105 Drops 31/32 due to Containment Temperature and Pressure Recognize and reports abnormal RCS leakage:

RCS pressure lowering with PZR Heaters ON.

Rising Containment dewpoint, pressure, and radiation.

US Directs RO/BOP to perform the immediate actions of E-0, Reactor Trip or Safety Injection.

RO/BOP Performs the immediate actions of E-0:

1. Checks reactor trip

2. Checks turbine trip

3. Checks power to AC emergency buses

4. Checks safety injection status US Ensures immediate actions of E-0 are completed Directs subsequent actions of E-0.

BOP Critical Task #1 Check Main Turbine Trip:

Manually Actuate Turbine Trip

-OR-

Manually Actuate AMSAC

-OR-

Manually Isolate Main Steam Lines US/RO Critical Task #2 Foldout Page - RCP Trip Criteria:

Stop all RCPs within 5 minutes of when RCS is < 1300 psig and CCP/SI pump running BOP Manually controls AFW flow to maintain SG narrow range levels 13% - 50%

once one SG narrow range level is greater than 13%.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 8 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior RO Determines that East CCP tripped and that the West CCP must be manually started.

Also Identifies that the West RHR, South SI, and West CCW pump failed to auto start on SI.

RO/BOP Completes actions of E-0 through step 19 as directed.

RO/BOP Performs manual actions of E-0, Attachment A as directed by US.

(Note ESW pump and Ventilation are impacted by slave relay failure)

US/RO Checks if RCS is Intact - NO US Announces transition to E-1, Loss of Reactor or Secondary Coolant and directs operator actions.

RO/BOP Completes actions of E-1 through step 12 (Check if RCS Cooldown and Depressurization is required) as directed.

BOP Restore SG narrow range levels >20%, but < 50%.

US/RO Checks if SI Termination Criteria is MET:

RCS Subcooling >40°F Secondary Heat Sink (SG >13% or AFW Flow >240x103)

RCS Pressure rising or stable - NO (May be Rising See next Step)

Pressurizer Level >16%

Crew Transition to ES-1.1, Safety Injection Termination if criteria is met.

ES-1.1 Actions are listed on Page 9.

IF SI Termination Criteria are NOT met, THEN E-1 Actions Are Continued on Page 10.)

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 9 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior Note:

Crew may transition to SI termination if criteria is met. This may involve stopping ECCS pumps and realigning charging until parameters change causing them to restart equipment and return to E-1 or ES-1.2. There are several points of transition to ES-1.2 from ES-1.1. The ES-1.1 Steps are listed below. The Scenario may be terminated upon transition to ES-1.2 US Announces transition to ES-1.1, Safety Injection Termination (step 6 of E-1).

RO/BOP Reviews ES-1.1, Foldout Page Criteria.

Monitors RCS Subcooling >40°F and PZR Level >16%, if NOT realign ECCS and GO TO E-1 US Directs Actions of ES-1.1 RO/BOP Performs the following as directed:

1. Resets both trains of Safety Injection

2. Resets both trains of Phase A

3. Establishes Control Air to Containment CREW Check if RCS Pressure is stable or Rising If Lowering, Transition to ES-1.2 RO/BOP Performs the following as directed:

1. Establish Normal Charging Flowpath

2. Isolate BIT Injection CREW Check if:

Pressurizer Level is stable and RCS Pressure is Stable or Rising If NOT, Transition to ES-1.2 CREW Check if transition is made to ES-1.2, then perform the following:

Reset SI Reset Containment Isolation:

Establish Control Air To Containment TERMINATE SCENARIO

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 10 of 14 Op-Test No.:

Scenario No.: NRC 2016-02 Event No.: 5,6,7 Event

Description:

Pressurizer Steam Space Manway Leak, Failure of Main Turbine Auto Trip, Trip of East CCP with Slave relay Failure Time Position Applicant's Actions or Behavior US/RO Check if RHR can be stopped:

Check RCS Pressure > 300 psig and stable Reset SI Shutdown RHR and place in Standby BOP Shutdown Unloaded EDGs.

US Announces transition to ES-1.2, Post LOCA Cooldown and Depressurization (at step 12).

CREW Check if transition is made to ES-1.2, then perform the following:

Reset SI Reset Containment Isolation:

Establish Control Air To Containment TERMINATE SCENARIO

Critical Task Summary (NRC 2016-02)

Cook Plant Units 1 & 2 Page 11 of 14 Task Elements Results

1 Manually Trip/Isolate Main Turbine Cueing:

All turbine stop valves closed status lights - LIT (E-0, Step 2)

Performance Indicators:

Manually Actuate Turbine Trip

-OR-

Manually Actuate AMSAC

-OR-

Manually Isolate Main Steam Lines

Prior to entering ECA-2.1 Performance Feedback:

All turbine stop valves closed status lights - LIT

-OR-

Main Steam Lines Isolated

MRV-210

MRV-220

MRV-230

MRV-240 SAT / UNSAT

2 Manually trip all Reactor Coolant Pumps Cueing:

RCS pressure - less than 1300 psig AND CCPs or SI pumps - at least one running

E-0, Foldout Page, Step 1

E-1, Foldout Page, Step 1

E-1, Step 1 Performance Indicators:

Manually stop all Reactor Coolant Pumps (RCPs) when RCS pressure is less than 1300 psig.

RCPs must be tripped within 5 minutes of the trip criteria being met.

Performance Feedback:

RCP ammeters - zero current

RCP trip low flow alarms - lit

RCS loop flow meters - flow lowering SAT / UNSAT

Simulator Instructions (NRC 2016-02)

Cook Plant Units 1 & 2 Page 12 of 14 Setup:

1. Reset to IC-733 MOL, 80% power, 888 MW, 864 ppm, 565.7 F 198 Steps on D

2. Reset control rods and check group step counters

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position

4. Advance chart recorder paper & clear chart recorder memory

5. Update PPC Chart Recorders VCT 20-70, PWR 70-90%, Tavg/Tref 561-571°F

6. Go to RUN and acknowledge/clear alarms

7. Verify MW OUT Selected on Main Turbine

8. Insert Malfunction:

TC03 to cause an Automatic Turbine Trip failure

RP20C to Cause Slave Relay Failure (CCP,CCW,SI,RH pumps dont auto start)

U1 RX Trip on Trigger 5

East CCP trip 5 seconds after RX Trip (continued on next page)

U1_RP20C U1_TC03 U1 RX Trip onT5 U1_ECP

Simulator Instructions (NRC 2016-02)

Cook Plant Units 1 & 2 Page 13 of 14 Scenario:

EVENT #1 Before the crew has started a power escalation, insert ICF U1_QLC451, final value 0 over 2 sec (QLC-451 fails Low).

If directed to energize interposing relay for QLC-451 then use:

Remote Function RPR157 to Trip LBX-112B NOTE: Ensure Crew has Caution Tags (> 2).

EVENT #2 Complete (sign-off) 1-OHP-4021-001-006 up to Step 4.77 EVENT #3 Insert Malfunction U1_QTC302, final value 175 (Letdown Temp Controller fails High) when crew has made a power change.

If contacted as MTI investigate Letdown Temp controller, report back after some 5 min.

delay that additional testing will be required to identify the problem.

(USE isd or MP u1_cvxqtc302_inp if local temp is taken with a pyrometer)

Local Indicator QTC-302 reads 175°F.

EVENT #4 Insert Malfunction U1_FFC220, final value 2 (FFC-220 fails LOW) after crew has recovered from Letdown temperature controller failure.

U1_RPR157 U1_QLC451 U1_FFC220 U1_QTC302

Simulator Instructions (NRC 2016-02)

Cook Plant Units 1 & 2 Page 14 of 14 EVENT #5,6,7 Initiate the following to lead to a Reactor Trip / Safety Injection (E-0 Entry).

IMF RC16, final value 100 (PZR Steam Space LOCA/ PZR Steam Space Manway Leak):

Turbine Trip Auto Failure U1_TC03.

Slave Relay Failure U1_RP20C East CCP Trip U1_ECP Local actions after entry into E-0:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

Aux Tour will monitor Spent Fuel Pool Radiation, Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR04A U1_EGR03A U1_EGR03B U1_EGR04A U1_RC16 U1_EGR04B U1_EGR04B U1_EGR03A U1_CHR03 U1_CHR02 U1_EGR03B U1_CHR01

Appendix D Scenario Outline Form ES-D-1 Cook Plant Units 1 & 2 Page 1 Facility: Cook Plant Scenario No: NRC 2016-03 Op-Test No: _________

Examiners: _________________

Operators: ___________________

Initial Conditions: MOL 1% Pwr, Manual Aux Feed to SG, Turbine offline Turnover:

Start the Middle Condensate Booster Pump, Raise Power to 3% for MFW Pump Start-up (Extra-RO will start the MFP)

Event No.

Malf. No.

Event Type*

Event Description 1

N-BOP Start the Middle Condensate Booster Pump.

2 R-RO Raise Power to 3% Power.

3 U1_NLP151 100 I-RO TS Pressurizer level channel CH 1: 1-NLP-151, fails High 4

ED07B C-RO TS PZR HTR Transformer Fails (11PHC Fails).

5 CLC10 to 0%

I-BOP Hotwell Level Transmitter CLC-10 Fails LOW.

6 RX11D

@100%

C-BOP TS SG PORV Controller Failure.

7 ED01 ED25 ED03A EG06B M

Loss of All AC Power.

1CD EDG Trip.

8 EG08A C-BOP 1AB EDG Speed Governor Failure.

9 FW48C C-BOP TD AFW Pump Fails to AUTO start.

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 2 of 16 Summary The BOP is directed to start the Middle Condensate Booster Pump (CBP). The operator will place the Middle CBP in service in accordance with the normal operating procedure.

The Crew is directed to raise power to 3-4% for MFW Pump Start-up.

The third event will involve the Pressurizer Level Controlling Channel NLP-151 failing high The RO will have to manually control level. The crew will need to implement an Abnormal Operating Procedure, select an operable channel, and restore Pressurizer Level controller to auto, and address Technical Specifications.

A failure of the PZR HTR Bus 11PHC will occur. The PZR SCR heater control will need to be transferred to 11PHA. The crew should also refer to Technical Specifications.

Then the Hotwell Level Transmitter CLC-10 fails LOW. The low failure will cause the Condensate Makeup valve (CRV-55) to fully open and the Condensate Letdown Valve (CRV-155) to fully close causing a rise in actual hotwell level. The BOP will be required to take manual control of the Hotwell Level Controller and return hotwell level to a normal band. The non failed hotwell level input may be selected for subsequent auto control.

The next event will involve the failure of the SG #14 PORV Controller. The controller will fail causing PORV 1-MRV-243 to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV and the US will need to declare the associated radiation monitor inoperable.

The Major event is a loss of all AC power. The reactor will trip. Failure of the EDGs will require entry into ECA-0.0 actions. Failure of the TDAFW Pump to auto start will require a manual start to restore feedwater flow. The crew will be required to take actions to restore Emergency Power (EP). The crew should transition to ECA-0.1 once power has been restored to one Safeguards Bus. The scenario will terminate when the crew has restored emergency power and transitioned to ECA-0.1 or ECA-0.2.

Critical Tasks Establish AFW (Start TDAFWP)

Restore Emergency Power to Safeguards Bus Procedures E-0, Reactor Trip or Safety Injection ECA-0.0, Loss of All AC Power

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 3 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 1 Event

Description:

Start the Middle Condensate Booster Pump Time Position Applicant's Actions or Behavior US Directs actions of 1-OHP-4021-054-001, Attachment 2, Operation of Hotwell (HW) and Condensate Booster (CB) Pumps to start the Middle CB Pump.

US Directs the following actions to realign condensate system:

Start the Middle CB pump.

BOP Performs the following to swap CB Pumps as directed:

1. Places the following switches in NEUTRAL:

Standby CB Pump Standby HW Pump Standby TACW Pump

2. Starts the Middle CB Pump.

3. Directs operator to verify CRV-224 closed.

4. Places the following switches in AUTO:

Standby CB Pump Standby HW pump Standby TACW pump Note:

If desired, crew may remove power from 1-CRV-202, Middle CBP Emergency Leak-Off.

Note:

Ann. 116, Drop 73, CNDST BOOSTER PUMP DISCH PRESSURE LOW may annunciate during this evolution.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 4 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 2 Event

Description:

Raise Power to 3-4% Power Time Position Applicant's Actions or Behavior RO Briefs crew on reactivity plan for power rise.

US Reviews reactivity plan.

US Directs RO to commence Power Escalation in accordance with 1-OHP-4021-001-006, Power Escalation procedure.

RO Commences power rise.

Verifies Control Rod Selector in Manual indicating rod Speed 48 Steps/min.

Place Rod Control to withdraw for desired number of steps (0.5 to

3)

Verify expected response on RCS Tavg, Delta-T power and steam dump demand.

US Acts as reactivity manager.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 5 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 3 Event

Description:

Pressurizer level channel CH 1: 1-NLP-151, fails high Time Position Applicant's Actions or Behavior CREW Respond to ANNUNCIATOR #108, Drop 1 Pressurizer Level High-High and Drop 3 Pressurizer Level High Deviation Alarms RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Restores PRZ level using manual control of EITHER:

PRZ Level Control (master controller)

-OR-1-QRV-251, CCP discharge flow controller.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

RO Note that CH 1: 1-NLP-151, failed high Check PRZ Level - Stable or Trending to Program Level -

Place PRZ control in Manual and restore PRZ Level to Program Level Check Letdown - IN SERVICE - Minimize Charging Flow if Letdown Isolated US Enters and directs actions of 1-OHP-4022-013-010, Pressurizer Level Instrument Malfunction Continued on Next Page

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 6 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 3 Event

Description:

Pressurizer level channel CH 1: 1-NLP-151, fails high Time Position Applicant's Actions or Behavior RO Check for Failed PRZ Level Instrument and perform the following:

IF 1-NLP-151 is the Control channel, THEN verify PRZ Level control in MANUAL using one of the following:

PRZ Level Control (master controller)

-OR-

1-QRV-251, CCP discharge flow controller.

Verify PRZ Level CTRL selector switch (1-LS-459-D) in CHANNELS 2 & 3 position.

Verify PRZ Level Rec selector switch (1-LS-459-E) in CHAN 2 or CHAN 3 position.

Check 1-NPP-151, Pressurizer Pressure Channel 1, for failure.

Check Letdown And PRZ Heaters In Service:

PRZ level - Greater than 17%

Letdown - In Service

Pressurizer Heaters Not Tripped Check PRZ Level Control In Auto:

1-QRV-251, CCP discharge flow controller in - Auto

Check PRZ Level Control in - Auto US Refers to Tech Specs (TS) :

TS 3.3.1, Reactor Trip System (RTS) Instrumentation (Table 3.3.1-

1)

Function 9, Pressurizer Water Level - High.

Condition A - Refer to Table Condition D - 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months to trip bistables (When above P-7)

TS 3.3.3 Post Accident Monitoring (Minimum channels are met) -

N/A.

TS 3.3.4 Remote Shutdown Instrumentation Condition A - 30 Days to restore to operable US Notifies SM/MTI to Initiate actions to trip bistables associated with NLP-151 PZR Level Failure per Attachment A of 1-OHP-4022-013-010.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 7 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 4 Event

Description:

Pressurizer Heater Transformer (TR11PHC) Fails Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Panel 108, Drops 46 and 50, indicative of a pressurizer (PRZ) heater power supply failure.

RO Reenergizes PRZ control (cycling) group heaters per 1-OHP-4024-108, Drop 46 annunciator response, as follows:

Opens breaker CB11PHC6 Closes breaker CB11PHA6 (Drop 50 clears)

RO Monitors PRZ pressure response and ensures normal PRZ heater operations for PHA supplied heaters.

US Refers to Tech Specs (TS):

TS 3.4.9.b Pressurizer - (Condition B.1) due to a loss of 1 train of pressurizer heaters. Restore B/U heaters to operable within 72 Hours.

Note: This TS prevents entry into Mode 1.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 8 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 5 Event

Description:

Hotwell Level Transmitter CLC-10 fails Low Time Position Applicants Actions or Behavior BOP Acknowledges and reports alarms on Ann. Panel 116 as applicable:

Drop 1, CONDENSER A HOTWELL LEVEL HIGH Drop 11, CONDENSER B HOTWELL LEVEL HIGH Drop 21, CONDENSER C HOTWELL LEVEL HIGH BOP Identifies that Hotwell Level Controller CLC-10 is failed as indicated by:

Condensate Makeup Valve (CRV-55) fully open Condensate Letdown Valve (CRV-155) fully closed Rising hotwell level on CLC-30 BOP Places Hotwell Level Controller in HAND and adjusts controller output to maintain normal hotwell level.

BOP Performs one of the following:

Maintains Hotwell level in MANUAL.

-OR-May select CLC-30 as the controlling channel and places the HW Level Controller back to AUTO.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 9 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 6 Event

Description:

SG PORV Controller Failure Time Position Applicant's Actions or Behavior BOP Recognize and reports Annunciator #114 Drop 24 that indicates SG #4 PORV MRV-243 has opened.

BOP Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

Place SG PORV #4 in MANUAL and closes SG #4 PORV.

US Direct operator actions to close SG #4 PORV and monitor Reactor Power.

US Declares the SG #4 PORV Radiation Monitor MRA-1602 inoperable.

US Refers to the following Tech Specs (TS) / Tech Requirements Manual (TRM):

TS 3.7.4, SG PORVs - (Note: Only Manual Ops Required) - N/A

TRM 8.3.8. Radiation Monitoring Instrumentation, Condition C.1-Restore channel/monitor to operable status within 7 Days (PORV must be able to auto open for Radiation Monitor but not PORV safety Function.)

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 10 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 7/8/9 Event

Description:

Complete Loss of All AC Power - 1AB/CD Emergency Diesel Generator Failure; Turbine Driven AFW Pump Fails to Auto Start Time Position Applicant's Actions or Behavior CREW Identifies the need for a Reactor Trip and trips the reactor manually.

US Directs RO/BOP to perform the immediate actions of 1-OHP-4023-E-0 (E-0), Reactor Trip or Safety Injection.

RO Performs the (primary) immediate actions of E-0:

1. Verifies reactor trip

2. Checks safety injection status BOP Performs the (secondary) immediate actions of E-0:

1. Checks turbine trip

2. Checks power to AC emergency buses:

Reports that NO AC emergency buses are energized Note: Crew may enter ECA-0.0, Loss Of All AC Power, directly.

US Announces transition (or entry) to 1-OHP-4023-ECA-0.0 (ECA-0.0), Loss Of All AC Power and directs RO/BOP to perform immediate actions for ECA-0.0.

US Announces RX Trip over Executone RO/BOP Performs the immediate actions of ECA-0.0:

Checks reactor trip Checks turbine trip US Ensures immediate actions are completed and directs subsequent actions of ECA-0.0.

RO Checks RCS isolated:

1. Checks PRZ PORVs closed (NRV-151, 152 and 153)

2. Checks letdown isolation valves closed (QRV-111 and 112)

3. Checks excess letdown isolation valves closed (QRV-113 and 114)

BOP Checks AFW flow > 240,000 PPH:

1. Manually starts the Turbine Driven AFW (TDAFW) Pump

2. May throttle TDAFW FMOs to establish > 240,000 PPH but heat sink requirements are met with SG Levels.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 11 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 7/8/9 Event

Description:

Complete Loss of All AC Power - 1AB/CD Emergency Diesel Generator Failure; Turbine Driven AFW Pump Fails to Auto Start Time Position Applicant's Actions or Behavior US Identifies that:

NEITHER EDG (AB nor CD) is available NEITHER the T11A nor the T11D bus is energized US Identifies Emergency Power (EP) source is AVAILABLE.

US Directs Restoration of 4KV Power From EP using Attachment D.

RO Critical Task

1 Directs AEO to manually isolate RCP Seals by closing :

1-CS-311N 1-CS-311S 1-CS-307 1-QCM-350 (locally)

BOP/US Places the following equipment in Pull-To-Lock:

MDAFPs CCPs RHR Pumps SI Pumps CTS Pumps CCW Pumps ESW Pumps NESW Pumps Open PRZ Heater Breakers T11-A6 T11-D9 BOP/US Identifies that the EITHER Train - Load Conservation lights are NOT LIT and that the Offsite Emergency Power is supplying the EP bus.

BOP Critical Task

2 Energizes EITHER emergency bus (T11A or T11D) from EP as directed:

1. Checks bus - not faulted T11A - Panel 119 Drops 75 & 88 (T11B Drops 96 & 98)

T11D - Panel 119 Drops 96 & 98 (T11C Drops 75 & 88)

2. Places EDG supply to bus in pull to lock

3. Places Load Conservation Switch in LOAD CON

4. Closes 4KV EP supply to bus and energizes bus RO Critical Task

1 Isolates Seal Return and RCP CCW Return line from Thermal Barrier:

QCM-350 OR QCM-250 - CLOSED CCM-454 OR CCM-453 - CLOSED

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Unit 1 & 2 Page 12 of 16 Op-Test No.:

Scenario No.: NRC 2016-03 Event No.: 7/8/9 Event

Description:

Complete Loss of All AC Power - 1AB/CD Emergency Diesel Generator Failure; Turbine Driven AFW Pump Fails to Auto Start Time Position Applicant's Actions or Behavior BOP Energizes emergency bus (T11B or T11C) from EP as directed:

1. Checks bus - not faulted

2. Places DG supply to bus in pull to lock

3. Closes 4KV EP supply to bus and energizes bus RO/BOP Checks RCS Temperature stable or trending to 547ºF.

RO/BOP Realigns Equipment following power restoration:

Start ESW Pump and verifies discharge valve opens.

Return Load Conservation Switch to NORMAL.

Reset and start one Control Room AHU.

US Based on RCS subcooling and PRZ level, announces transition to:

ECA-0.1, Loss Of All AC Power Recovery Without SI Required

-OR-ECA-0.2, Loss Of All AC Power Recovery With SI Required if Subcooling is < 40 ºF OR Pressurizer level is < 16%.

TERMINATE SCENARIO

Critical Task Summary (NRC 2016-03)

Cook Plant Unit 1 & 2 Page 13 of 16 Task Elements Results

1 Isolate Seal Return Cueing:

CLOSE QCM-350 and/or Dispatch an operator to locally close QCM-350 (ECA-0.0, Step 1.c & 4d, Attachment D )

CLOSE QCM-250 and/or Dispatch an operator to locally close QCM-250 (ECA-0.0, Step 7d, Attachment D )

Performance Indicators:

QCM-350 OR QCM-250 Closed before CCP pump starts or is restarted (Within 15 Minutes of Loss of All AC)

Performance Feedback:

QCM-350 Close Lights Lit or field report OR QCM-250 Close Lights Lit SAT / UNSAT

2 Restore Emergency Power Cueing:

Restore AC Power (ECA-0.0)

T11 A, B, C, D Energized Lights - NOT Lit Performance Indicators:

Power should be restored prior to depressurizing intact SGs to 190 psig (ECA-0.0, Step 19):

Restores emergency power (EP) to at least one 4KV emergency (pump) bus (i.e., T11A or T11D).

Performance Feedback:

T11A or T11D bus energized Power available to safeguards equipment.

SAT / UNSAT

Simulator Instructions (NRC 2016-03)

Cook Plant Unit 1 & 2 Page 14 of 16 Setup:

1. Reset to IC-730 1294.93 ppm, 150 steps on Rods, 549.3°F

2. Reset control rods and check group step counters.

3. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

4. Set Up PPC Digital Display to Point U0485 (Delta T Power)

5. Advance chart recorder paper & clear chart recorder memory.

6. Verify/Activate the following (pre-load) malfunctions:

IMF EG08A, AB EDG Speed Governor Failure

IMF FW48C, TD AFW pump fails to AUTO start

IMF SFR401, SJAE Flow to Maintain Steady Low Power Values

7. Assign the following Event Trigger 9:

IMF ED01, Delay 10 secs, Loss of 345 KV Bus 1

IMF ED25, Delay 12 secs, Loss of 765/345 KV Transformer Bank No. 4

IMF E03A, Delay 15 secs, Loss Of Reserve Auxiliary Transformer TR-101AB

EG06B Delay 30 secs, CD EDG Trip U12_ED01 U12_ED25 U1_EG06B U1_ED03A U1_SFR401 U1_FW48C U1_EG08A

Simulator Instructions (NRC 2016-03)

Cook Plant Unit 1 & 2 Page 15 of 16 Scenario:

EVENT #1 Report as AEO as required:

Starting Party is standing-by, the Middle CB Pump is ready for start. Maintenance verified the oil pump is primed and has added oil IAW 1-OHP-4021-054-001.

Oil Pressure is 5 psig after pump start.

1-CRV-224 is closed Report as required to other departmental requests.

If asked to remove power from 1-CRV-202, insert (May need to use Soft Panel for VDAB)

EVENT #2 NOTE: Ensure 1-OHP-4021-001-006, Power Escalation procedure is sign-off thru step 4.7 and steps have been completed on the simulator.

EVENT #3 Insert malfunction U1_NLP151, final value 100 (PZR Level NLP151 fails High) when crew has performed the power change.

EVENT #4 After the crew has responded to the PZR level failure, insert IMF ED07B (PZR heater transformer fails).

As AEO, report T11D9 tripped on Overload/Overcurrent.

ZDIVDAB13_U1 to OFF U1_ED07B U1_NLP151

Simulator Instructions (NRC 2016-03)

Cook Plant Unit 1 & 2 Page 16 of 16 EVENT #5 When the PRZ heater transformer failure is inserted, also insert ICF U1_CLC10, Final Value 0, to fail Hotwell Level Transmitter (CLC-10) Low.

and close overboard valve Note: Takes ~8 minutes before alarms come in.

Monitor u1_msxcla10_inp for Hotwell level - alarms at 588.333 If Dispatched to restore fuses for 1-CMO-155 Report back that Fire Watch and Chemistry have been notified.

EVENT #6 After the crew has responded to the Hotwell level transmitter failure, then insert RX11D, final value 100 (SG PORV Controller failure).

EVENT #7 - 9 After the crew has responded to the SG PORV failure, insert Event Trigger 9.

IMF ED01, Delay 10 secs, Loss of 345 KV Bus 1

IMF ED25, Delay 12 secs, Loss of 765/345 KV Transformer Bank No. 4

IMF E03A, Delay 15 secs, Loss Of Reserve Auxiliary Transformer TR-101AB

EG06B Delay 30 secs, CD EDG Trip If directed to locally close seal injection valves (1-CS-311N, 311S and 307) then activate remote functions:

IRF CVR20, Final Value 0 (CLOSE)

IRF CVR21, Final Value 0 (CLOSE)

If directed to locally isolate RCP Seal Water Return Valve (1-QCM-350) then activate remote function:

IRF CVR77, Final Value 0 (CLOSE)

U1_RX11D Activate Trigger 9 U1_CLC10 U1_CVR21 U1_FWR20 U1_CVR77 U1_EDPR37Z U1_CVR20

Appendix D Scenario Outline Form ES-D-1 Cook Plant Units 1 & 2 Page 1 Facility: Cook Plant Scenario No: NRC 2016-04 Op-Test No: _________

Examiners: _________________

Operators:___________________

Initial Conditions: MOL 57% pwr; 602MW, 931 ppm, 559.6 F, 179 Steps on D East Motor Driven AF Pump OOS.

Turnover: Perform ESW Pump Strainer Backwash. Raise Power to 80%

Event No.

Malf. No.

Event Type*

Event Description 1

N-BOP Perform ESW Strainer Backwash 2

U1_RX08A @

100 C-RO Spray Valve fails open in Auto 3

R-RO Raise Reactor Power to 80%

4 U1_CBPN U1_FW58B U1_FW58C C-BOP North CB pump trip; Middle CB pump fails to start in AUTO 5

U1_NPP151

@ 1700 I-RO TS Pressurizer Pressure Channel NPP-151 Fails Low 6

U1_MPP242

@1200 psig I-BOP TS SG 4 Pressure Channel (MPP-242) fails High (SG #14 PORV fails open) 7 U1_RC10A to 20% over 5 min. ramp U1_RC01A at 50% after 5 min.

Major Large Break Loss of Coolant Accident on Loop 1 (Starts Out Slowly) 8 U1_RHR17 -

RO, ZLO101TA4_

U![GRN]

C-RO 1W RHR Pump Fails to AUTO Start on SI 9

U1_ERHR C-RO 1E RHR Pump Trips 15 minutes after SI

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 2 of 19 Summary The scenario starts with the plant at 57% power with the Both Main FW Pumps in service.

The crew is directed to perform a PMT on the East ESW Pump Strainer (Manual Backwash)

The first failure involves a failure of one of the PZR Spray valves will fail Open while in Auto. The crew will respond to lowering RCS pressure by closing the valve in manual using OHP-4022-IFR-001.

After the Pressurizer Spray Valve Failure, the crew is directed to raise power.

The next event is a trip of the North Condensate Booster pump. This will result in reduced feedwater capability. BOP will be required to manually start the Middle or South Condensate Booster pump. Crew will be required to implement compensatory actions to stabilize the plant.

A short time later the Pressurizer Pressure Controlling Channel, NPP-151, fails LOW. The RO will be required to take manual control of Pressurizer Pressure Master Controller and restore normal pressure control. The Crew will implement the Abnormal Operating Procedure, address Technical Specifications, select an operable channel, and restore pressure control to automatic.

Next a failure of SG #14 Pressure Channel (MPP-242) fails high causing SG #14 PORV to fully open. This will also cause Reactor power to slightly rise. The BOP will need to take manual action to close the PORV, the crew will implement AOP actions, and the US will need to declare the associated radiation monitor inoperable.

Shortly after the SG Pressure Channel failure, a LOCA will slowly develop resulting in a large break LOCA. The plant will trip and Safety Injection will actuate. As the crew performs the actions of E-0 they will note that the 1W RHR pump failed to auto start on the SI. The crew will transition to E-1 and to ES-1.3 to align for cold leg recirculation. The 1E RHR will trip 15 minutes into the event. The crew will have to align ECCS to the recirculation sump without the 1E RHR pump. The scenario will terminate when the crew has aligned ECCS for cold leg injection.

Critical Tasks Establish Low Pressure SI (RHR)

Establish Cold Leg Recirculation Procedures E-0 Reactor Trip or Safety Injection E-1 Loss of Reactor or Secondary Coolant ES-1.3 Transfer to Cold Leg Recirculation

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 3 of 19 Op-Test No.:

Scenario No.: NRC 2016-04 Event No.: 1 Event

Description:

1E ESW Pump Strainer Backwash Time Position Applicant's Actions or Behavior BOP Perform ESW Strainer Backwash per 12-OHP-4021-019-001 6 BOP Manually backwashes the 1E ESW pump strainer Places backwash selector in RIGHT position Places strainer control in MANUAL May depress manual BACKWASH pushbutton (for additional backwash)

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 4 of 19 Op-Test No.:

Scenario No.: NRC 2016-04 Event No.: 2 Event

Description:

Pressurizer Spray Valve NRV-163 Controller Fails to 100%

Time Position Applicant's Actions or Behavior RO Performs the following:

Recognizes and reports Ann. Panel 108, Drop 8, PRESSURIZER PRESS LOW DEV BACKUP HTRS ON.

Identifies that NRV-163 PRZ spray valve is open US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US/RO Directs RO to take Manual Control of 1-NRV-163 and Restore Pressurizer pressure.

RO Performs the following:

Manually closes 1-NRV-163 PRZ Spray Valve Monitors PRZ pressure control system and ensures pressure returns to normal conditions (~2235 psig).

US May enter the following TS if Pressure lowers to <2200 psig during the transient:

3.4.1 DNB & Tavg Parameters (if RCS pressure goes <2200 psig.)

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 5 of 19 Op-Test No.:

Scenario No.: NRC 2016-04 Event No.: 3 Event

Description:

Raise Turbine Load / Raise Reactor Power Time Position Applicant's Actions or Behavior RO Calculates the dilution required per 1-OHP-4021-005-002, Attachment 9, Boration or Dilution Volume Determination.

RO Briefs crew on reactivity plan for power escalation.

US Reviews reactivity plan.

US Directs RO to commence Power Escalation in accordance with 1-OHP-4021-001-006.

RO Performs DILUTION (batch add OR continuous):

Place RC Makeup Blend control switch in STOP Place RC Makeup Blend Control Mode switch in DILUTE or ALT DILUTE Adjust PW to the desired flow rate and/or amount.

May close QRV-451 if aligning to CCP Suction Only Place RC Makeup Blend control switch in START May take QRV-303 to Manual and Open as required to maintain VCT Level and Pressure.

RO/BOP Commences escalation:

Raises turbine load (reactor power) using the DCS HMI.

Maintains Tavg/Tref deviation within limits by dilution and turbine load adjustments. (Administrative Limits of +/- 2°F)

Ensures Axial Flux Difference (AFD) is maintained within target band by manual control rod movement as needed.

BOP Acts as peer checker for RO during blender operations and with RO verifies appropriate reactivity feedback.

RO Verifies appropriate reactivity feedback.

BOP Monitors and maintains main electrical generator temperatures within limits per:

1-OHP-4021-059-001, Generator Stator Cooling Water System 1-OHP-4021-080-003, Generator Hydrogen Gas System

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 6 of 19 Op-Test No.:

Scenario No.: NRC 2016-04 Event No.: 4 Event

Description:

North CB pump trip; Middle CB pump fails to start in AUTO Time Position Applicant's Actions or Behavior BOP Recognizes feedwater control problem and reports Panel #116 alarms:

Drop 73 - CNDST BOOSTER PUMP DISCH PRESSURE LOW Drop 71 - CNDST BOOSTER PUMP MOTOR INSTANT TRIP US Directs operator actions to stabilize the unit and restore Condensate Booster pump flow.

RO Monitor RCS & Secondary parameters during transient.

BOP Manually start the Middle CB pump.

May Place North CB pump control switch to TRIP and back to NEUTRAL (Clear Alarms).

Monitor Secondary parameters for normal operations.

May Dispatch an AEO to Check CRV-224 Low Pressure Heater Bypass Closed US/RO Stabilize Power, if desired:

Place Main Turbine on HOLD (at constant load) as desired.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 7 of 19 Op-Test No.: _____

Scenario No.: NRC 2016-04 Event No.: 5 Event

Description:

Pressurizer Pressure Channel (NPP-151) Fails Low Time Position Applicant's Actions or Behavior RO Recognizes and reports annunciators on Panel #108 indicative of a pressurizer (PRZ) pressure instrument failure (Drops 8, 9, 10).

RO Reports instrument malfunction and performs the immediate actions of OHP-4022-IFR-001, Instrument Failure Response:

1. Restores PRZ pressure using manual control of EITHER:

PRZ pressure master controller Both PRZ spray valve controllers US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Enters and directs actions of OHP-4022-013-009, Pressurizer Pressure Instrument Malfunction procedure.

RO Performs the following actions as directed:

1. Reports NPP-151 has failed

2. Ensures PRZ pressure master controller is in manual

3. Places PRZ Press Ctrl selector switch in Ch 2 & 3 position

4. Places the following recorder switches in Ch 2, 3 or 4 position:

PRZ Press Rec selector Delta T selector Overpower Delta T selector Overtemp Delta T selector

5. Verifies QMO-225, E CCP Leakoff is open

6. Dispatches Aux operator to open breaker for QMO-225 (1-ABV-D-5C)

7. Checks NLP-151, PRZ Level Channel 1 and NLI-151, PRZ Level Cold Calibration instruments for failure

8. Nulls (~2235#) and returns the following controllers to auto:

Both PRZ spray valve controllers PRZ pressure master controller

9. Verify P-11 is in its correct state.

(Continued on Next Page)

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 8 of 19 Op-Test No.: _____

Scenario No.: NRC 2016-04 Event No.: 5 Event

Description:

Pressurizer Pressure Channel (NPP-151) Fails Low Time Position Applicant's Actions or Behavior US Declares the East Centrifugal Charging Pump inoperable.

US Refers to ITS LCO:

3.3.1 RTS Instrumentation (Table 3.3.1-1, Function 6, 8a, 8b - Cond D)

3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 1d, 8b - Cond D &

G) (6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months to trip bistables)

3.3.4 Remote Shutdown Instrumentation (Table B3.3.4-1 Function 2 Cond A - 30 Days)

3.4.1 DNB & Tavg Parameters (if RCS pressure goes <2200 psig.)

3.5.2 ECCS Subsystems (Cond A - 72 hr)

TRM 8.1.1 Boration Systems (Cond A - 72 hr)

TRM 8.7.14 Thermal Power (Only applicable greater than 3250 MWt -

NA)

US Notifies SM/MTI to initiate actions to trip bistables associated with NPP-151 PZR Pressure Failure per Attachment A of OHP-4022-013-009.

RO Monitors PRZ pressure response and ensures normal PRZ heater operations

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 9 of 19 Op-Test No.:

Scenario No.: NRC 2016-04 Event No.: 6 Event

Description:

SG #4 Press. Failure (MPP-242) Fails HIGH - #4 SG PORV Opens Time Position Applicant's Actions or Behavior BOP Recognize and reports Annunciator Panel #114, Drop 24, 1-MRV-243 OP OR HSD1 PANEL OVERRIDE alarm that indicates SG #4 PORV (MRV-243) has opened.

Panel 113 Drop 14 May also alarm.

US Enters and directs actions of OHP-4022-IFR-001, Instrument Failure Response procedure.

US Direct operator actions to determine cause, reclose SG #4 PORV, and monitor Reactor Power.

BOP Place SG PORV #4 in Manual and Closes #4 PORV.

US Enters and directs actions of 1-OHP-4022-013-012, Steam Generator Pressure Instrument Malfunction procedure.

BOP Performs the following actions as directed:

1. Checks SG PORVs closed.

2. Reports MPP-242 has failed high.

3. Returns MFP P controller to auto (if placed in manual).

US Refers to TSs / TRM:

TS 3.3.2 ESFAS Instrumentation (Table 3.3.2-1, Function 1.e (1& 2) &

4.d - all Condition D) Trip bistables in 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months

TS 3.7.4, SG PORVs (Note: Only Manual Ops Required) - N/A

TRM 8.3.8. Radiation Monitoring Instrumentation (Table 8.3.8-1, Function 2.b - Condition C)

Declares MRA-1602 inoperable

Restore in 7 days US Notifies SM/MTI to Initiate actions to trip bistables associated with MPP-242 Steam Generator Pressure Instrument Failure per Attachment D-3 of 1-OHP-4022-013-012.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 10 of 19 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes after SI)

Time Position Applicant's Actions or Behavior RO/US Acknowledges Ann. Panel 122, Drop 83, ICE CONDENSER INLET DOORS OPEN, alarm and/or RMS PPC Alarms on Panel 111 and determines that a loss of reactor coolant is occurring based on the following:

Pressurizer and VCT level change

Charging and letdown flow mismatch

Containment radiation monitoring trend

Containment pressure rise

Containment sump level rise US May enter and direct actions of 1-OHP-4022-002-020, Excessive Reactor Coolant Leakage procedure.

RO Performs the following actions, if directed:

1. Manually raises charging flow to maintain pressurizer level.

2. Manually adjusts seal injection flow (6-12 gpm / each RCP).

3. Reduces/isolates letdown flow to maintain pressurizer level.

4. Attempts to determine RCS leak rate.

US Directs RO/BOP to manually trip the Reactor and perform the immediate actions of E-0, Reactor Trip or Safety Injection (based on RCS leak rate beyond charging or makeup system capability or rising containment pressure).

RO/BOP Perform the immediate actions of E-0:

1. Checks reactor trip.

2. Checks turbine trip.

3. Checks power to AC emergency buses.

4. Checks safety injection status.

US Ensures immediate actions of E-0 are completed.

RO/BOP Reviews E-0 Foldout Page Criteria.

US Directs subsequent actions of E-0.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 11 of 19 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes after SI)

Time Position Applicant's Actions or Behavior RO/BOP Performs manual actions of E-0 Attachment A as directed by US.

RO/BOP Performs the following actions as directed:

Checks SGSVs closed (MSLI).

Checks CTS actuated Light LIT Checks Cntmt Isol Phase B actuated.

Stops all RCPs.

Stops All Lower Cntmt Vent Fans (CLVs).

Stops All CRDM Fans.

RO/BOP Critical Task #1 Attachment A of E-0 Checks all ECCS pumps running and manually starts:

W RHR pump RO/BOP Manually controls AFW flow to maintain SG narrow range levels 13% [28%] - 50% once one SG narrow range level is > 13% [28%].

CREW Completes all actions of E-0 through step 19 (Check If RCS Is Intact).

Checks CTS Pumps Started, SML 9A/9B Lights, and Spray Add Flow after actuated light is OFF US Announces transition to E-1, Loss Of Reactor Or Secondary Coolant (at step 19 of E-0).

NOTE:

Momentary entry into FR-P.1 will be required until crew verifies RHR flow sufficient to indicate a LB LOCA has occurred.

RO/BOP Reviews E-1 Foldout Page Criteria (see NOTE regarding cold leg switchover criteria).

NOTE:

When RWST level lowers to < 30% then the crew must immediately Transition to ES-1.3, Transfer To Cold Leg Recirculation.

See Page 12 for applicants actions or behaviors associated with ES-1.3, Transfer To Cold Leg Recirculation.

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 12 of 19 Op-Test No.:

Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes)

Time Position Applicant's Actions or Behavior US Directs actions of E-1, Loss Of Reactor Or Secondary Coolant.

RO/BOP Acknowledges Annunciator 106, Drop 45, RHR PUMPS MOTOR INSTANT TRIP and reports East RHR pump trip.

US/RO Identifies and reports that the East RHR pump has tripped:

Recognizes one train of RHR has lost recirculation capability Verifies at least one train of cold leg recirculation capability exists BOP Maintains SG narrow range levels 20% - 50%.

BOP Performs the following as directed:

1. Stops running Emergency Diesel Generators (EDGs).

2. Dispatches operator to secure EDG jacket water pumps.

US Check if transfer to cold leg recirculation is required (RWST

<30%).

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 13 of 19 Op-Test No.: Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes)

Time Position Applicant's Actions or Behavior Applicants actions or behavior associated with ES-1.3, Transfer To Cold Leg Recirculation.

US Announces transition to ES-1.3, Transfer To Cold Leg Recirculation when RWST level < 30% per:

E-0, Foldout Page, Criteria 3 E-1, Foldout Page, Criteria 5 E-1, Step 13 US Directs actions of ES-1.3,Transfer To Cold Leg Recirculation.

RO/BOP Resets both trains of Safety Injection.

RO/BOP Checks CCW return flow on each RHR Hx at 3000-3500 gpm.

(may only perform for the East CCW HX)

RO/BOP Checks the following prior to switching over to cold leg recirc:

RWST level < 20%

Cntmt water level > MIN RECIRC LEVEL US/RO Critical Task #2 Directs/Performs switchover as follows:

NOTE: If RWST level < 9% then stop CCPs and SI pumps.

1. Stops and locks out East CTS pump (if not previously stopped).

2. Locks out East RHR pump(OOS).

3. Checks East CTS and East RHR pumps stopped

4. Initiates valve closure:

IMO-310, East RHR pump suction IMO-215, East CTS pump suction from RWST

5. Stops and locks out West CTS pump (if not previously stopped).

6. Stops and locks out West RHR pump.

7. Checks West CTS and West RHR pumps stopped.

8. Initiates valve closure:

IMO-320, West RHR pump suction IMO-225, West CTS pump suction from RWST

Appendix D Required Operator Actions Form ES-D-2 Cook Plant Units 1 & 2 Page 14 of 19 Op-Test No.: Crews Scenario No.: NRC 2016-04 Event No.: 7/8/9 Event

Description:

Large Break LOCA 1W RHR Pump Fails to Auto Start 1E RHR Pump Trips (after 15 minutes)

Time Position Applicant's Actions or Behavior US/RO Critical Task #2 Continues to direct/perform switchover as follows:

9. Restores control power to ICM-305, Recirc sump to East RHR/CTS pumps.

10. Checks ICM-305 open interlock:

IMO-310 fully closed IMO-215 fully closed

11. Opens ICM-305.

12. Starts:

May attempt to start the East RHR pump (1 restart allowed)

East CTS pump if previously running.

13. Restores control power to ICM-306, Recirc sump to West RHR/CTS pumps.

14. Checks ICM-306 open interlock:

IMO-320 fully closed IMO-225 fully closed

15. Opens ICM-306.

16. Starts West RHR pump Starts the West CTS pump if previously running.

17. Checks at least one RHR pump running on the recirc sump TERMINATE SCENARIO

Critical Task Summary (NRC 2016-04)

Cook Plant Units 1 & 2 Page 15 of 19 Task Elements Results

1 Manually starts 1W RHR pump (one low-head ECCS pump)

Cueing:

Check ECCS Pumps ALL running (E-0, Step 7 -

Att. A Step 1)

Check RHR Hx Flow Indicated (E-1, Step 12.

RNO)

Check Cold Leg Recirc Capability (E-1, Step 11)

Performance Indicators:

Starts the W RHR pump and ensures at least one train of low-head ECCS available for cold leg recirculation.

Must be performed prior to ES-1.3, Step 6.s Check At Least One RHR Pump - Running On Recirculation Sump.

Performance Feedback:

W RHR pump red run light lit

W RHR pump current indicated

W RHR pump flow indicated SAT / UNSAT

2 Establish Cold Leg Recirculation Flow Cueing:

E-0 Foldout Page, Criteria 3 (switchover criteria)

E-1 Foldout Page, Criteria 5 (switchover criteria)

E-1, Step 13, Check For Transfer To CL Recirc.

Performance Indicators:

At least one train of ECCS running aligned to the containment sump.

RHR pumps stopped for no longer than 5 minutes during switchover.

No total interruption of ECCS flow (CHG and SI) to the RCS during switchover.

Performance Feedback:

At least one train of ECCS pumps running /

indicating flow with suction aligned to Recirc Sump.

SAT / UNSAT

Simulator Instructions (NRC 2016-04)

Cook Plant Units 1 & 2 Page 16 of 19 Setup:

1. Reset to IC-732 MOL 57% pwr; 602MW, 931 ppm, 559.6 F, 179 Steps on D.

2. Reset control rods and check group step counters.

3. Verify that the North and South CB pumps are running w/ Middle CB pump in AUTO.

4. Place Master Annunciator Silence pushbutton lockout ring in LOCKOUT position.

5. Advance chart recorder paper.

6. Set up PPC Recorders

7. Go to RUN and acknowledge/clear alarms.

8. Tagout 1E MDAFP as follows:

Place control switch in pull-to-lock

Place clearance tag on control switch

Activate remote function FWR61, final value RO

9. Activate the following pre-load override/malfunction:

FW58B, Middle CB pump fails to start in AUTO

FW58C, South CB pump fails to start in AUTO

AN06_U1(48) RHR Alarm OFF

RHR17 to RO (Prevent U1 W RHR start)

ZLO101TA4_U1[GRN] ON

10. Assign the following to ET10:

SI Signal to event trigger ET10

U1_ERHR with a 15 minute delay to event trigger ET10

11. Assign the following to ET3

U1 W RHR in Close/after Close

U1_RHR17 to RI on ET3

ZLO101TA4_U1[GRN] clear

12. Assign the following to ET7:

Malfunction RC10A to 20% with a 2 minute ramp to event trigger ET7

Malfunction RC01A to 50% with a 5 minute delay to event trigger ET7 RHR to RI Clear RHR Stop Light U1_FWR61 West RHR Close U1_FW58B U1_RHR17 U1_FW58C U1 SI on Trg E10 U1_RC10A AN06_U1(048)

U1_RC01A ZLO101TA4_U1[GRN]

U1_ERHR

Simulator Instructions (NRC 2016-04)

Cook Plant Units 1 & 2 Page 17 of 19 Scenario:

EVENT #1 No actions required.

EVENT #2 When the crew has completed the backwash, a failure of 1-NRV-163 PZR Spray valve Controller will cause the valve to fully Open while in Auto EVENT #3 No actions required. (Prompt crew as Shift Manager if required to continue Power Escalation)

EVENT #4 When crew has performed the required power change, insert CBPN (North CB pump trip)

If contacted as AEO to investigate Condensate Booster pump operations, report back after some 3 min. delay that all parameters are in the normal band and stable on the Middle CB pump. After 2 min., report an overcurrent trip on North CB pump breaker and that the motor smells of burnt insulation.

Report back that 1-CRV-224 Low Pressure Heater Bypass is Closed.

EVENT #5 Insert malfunction U1_NPP151, final value 1700 (NPP-151 fails LOW)

If directed to remove power from 1-QMO-225, then activate the remote function for breaker 1-ABV-D-5C.

U1_CBPN U1_NPP151 U1_EDPR10J U1_RX08A

Simulator Instructions (NRC 2016-04)

Cook Plant Units 1 & 2 Page 18 of 19 EVENT #6 After crew has addressed the spray valve failure, ICF U1_MPP242 final value 1200 once the power change has been demonstrated EVENT #7 After crew has recovered from the failed SG Pressure Channel failure, Activate Trigger 7 to start the RCS Leak\\LOCA.

EVENT #8 No additional actions required EVENT #9 Previously setup with a 15 minute delay to trigger ET10 IF the RHR Pump fails to trip after 15 minutes ERHR U1_ERHR U1_MPP242 Activate TRG 7

Simulator Instructions (NRC 2016-04)

Cook Plant Units 1 & 2 Page 19 of 19 Local actions after entry into E-0:

Locally stop U1 Ice Condenser AHUs MRF CHR01 to OFF

Aux Tour will monitor Spent Fuel Pool Level and Temperatures

Place PACHMAS in service - MRF CHR02 or 03 with 10 min delay.

OR (both have 10 minute delay built in)

U2 has aligned CR vent for U1 SI, Fan 2-HV-AS-2 is running.

If directed to secure EDG jacket water pumps select OFF then AUTO Remote OFF AUTO EGR 03A EGR 03B EGR 04A EGR 04B U1_EGR03B U1_EGR03A U1_EGR03A U1_CHR02 U1_EGR04B U1_EGR04B U1_CHR01 U1_EGR03B U1_CHR03 U1_EGR04A U1_EGR04A

Appendix D Scenario Outline Form ES-D-1 Cook Plant Units 1 & 2 Page 1 Facility: Cook Plant Scenario No: NRC 2016-04(a) Op-Test No: _________

Examiners: _________________

Operators:___________________

Initial Conditions: MOL 57% pwr; 602MW, 931 ppm, 559.6 F, 179 Steps on D East Motor Driven AF Pump OOS.

Turnover: Perform ESW Pump Strainer Backwash. Raise Power to 80%

Event No.

Malf. No.

Event Type*

Event Description 1

N-BOP Perform ESW Strainer Backwash 2

U1_RX08A @

100 C-RO Spray Valve fails open in Auto 3

R-RO Raise Reactor Power to 80%

4 U1_CBPN U1_FW58B U1_FW58C C-BOP North CB pump trip; Middle CB pump fails to start in AUTO DELETED 5

U1_NPP151

@ 1700 I-RO TS Pressurizer Pressure Channel NPP-151 Fails Low 6

U1_MPP242

@1200 psig I-BOP TS SG 4 Pressure Channel (MPP-242) fails High (SG #14 PORV fails open) 7 U1_RC10A to 20% over 5 min. ramp U1_RC01A at 50% after 5 min.

Major Large Break Loss of Coolant Accident on Loop 1 (Starts Out Slowly) 8 U1_RHR17 -

RO, ZLO101TA4_

U![GRN]

C-RO 1W RHR Pump Fails to AUTO Start on SI 9

U1_ERHR C-RO 1E RHR Pump Trips 15 minutes after SI

(N)ormal, (R)eactivity, (I)nstrument, (C)omponent, (M)ajor