ML20083M256: Difference between revisions

From kanterella
Jump to navigation Jump to search
(StriderTol Bot insert)
 
(StriderTol Bot change)
 
(One intermediate revision by the same user not shown)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:_. . - - - - - - - - - - - -- _-
{{#Wiki_filter:_.. - - - - - - - - - - - -- _-
v COOPER NUCLEAR STATION
v COOPER NUCLEAR STATION 1
                                                                                                                                  " ^ " " '
4_ Nebraska Public Power District
                                                                              '' ~ " "A*E"*"OM;UO.^i N
" ^ " " '
1          4_ Nebraska Public Power District NLS940119 December 23, 1994 Mr. L. L Callan Regional Administrator NRC Region IV 611 Ryan Plaza Drive, Suite 400 Arlington, Texas 76011
'' ~ " "A*E"*"OM;UO.^i N
NLS940119 December 23, 1994 Mr. L. L Callan Regional Administrator NRC Region IV 611 Ryan Plaza Drive, Suite 400 Arlington, Texas 76011


==Dear Mr. Callan:==
==Dear Mr. Callan:==
On August 25, 1994, you provided the District with a letter that outlined certain concerns regarding the Cooper Nuclear Station Operations Review Committee (SORC). Your letter stated in part:
On August 25, 1994, you provided the District with a letter that outlined certain concerns regarding the Cooper Nuclear Station Operations Review Committee (SORC). Your letter stated in part:
[,.               [O]ur preliminary review has also resulted in our having serious concerns about the functioning of the Station Operations Review Committee (SORC).
[,.
It is clear from a review of the report [by the Office of Investigations] that members of the SORC did not, in this instance. implement their assigned duties and responsibilities. In addition, it is not apparent that the processes                                     ,
[O]ur preliminary review has also resulted in our having serious concerns about the functioning of the Station Operations Review Committee (SORC).
utilized by the SORC functioned to ensure that the SORC's oversight responsibilities were sufficiently independent from outside influences such as senior management and schedular pressures.                                                                           l j
It is clear from a review of the report [by the Office of Investigations] that members of the SORC did not, in this instance. implement their assigned duties and responsibilities. In addition, it is not apparent that the processes utilized by the SORC functioned to ensure that the SORC's oversight responsibilities were sufficiently independent from outside influences such as senior management and schedular pressures.
As you are aware. the District has responded in separate correspondence to the NRC regarding alleged outside imluences by senior management and alleged schedular pressures on SORC.                                       l Accordingly, the following discussion focuses on the functionality of SORC and its ability to                               i implement assigned duties and responsibilities.
As you are aware. the District has responded in separate correspondence to the NRC regarding j
Several NRC concerns with SORC have been supported by the District-sponsored September 1, 1994 Diagnostic Self-Assessment Team (DSAT) report and the NRC's November 29, 1994 Special Evaluation Team report. The District agrees with these conclusions and has taken significant steps to improve SORC beginning with an October 5,1994, management meeting at which the Site Manager provided his expectations regarding SORC performance. He stressed the oversight mission of the SORC, reinforced high standards and expectations, and provided guidance on how the SORC's mission should be completed. The new Plant Manager expressed similar expectations during the October 6,1994 SORC meeting. More details regarding v        additional actions taken to achieve these improvements are provided below.
alleged outside imluences by senior management and alleged schedular pressures on SORC.
9505190180 950512 PDR     ADOCK 05000298                                                                                                 i P                     PDR                                                                                             J
Accordingly, the following discussion focuses on the functionality of SORC and its ability to implement assigned duties and responsibilities.
Several NRC concerns with SORC have been supported by the District-sponsored September 1, 1994 Diagnostic Self-Assessment Team (DSAT) report and the NRC's November 29, 1994 Special Evaluation Team report. The District agrees with these conclusions and has taken significant steps to improve SORC beginning with an October 5,1994, management meeting at which the Site Manager provided his expectations regarding SORC performance. He stressed the oversight mission of the SORC, reinforced high standards and expectations, and provided guidance on how the SORC's mission should be completed. The new Plant Manager expressed similar expectations during the October 6,1994 SORC meeting.
More details regarding additional actions taken to achieve these improvements are provided below.
v 9505190180 950512 PDR ADOCK 05000298 i
P PDR J
(
(


NLS940119 December 23. 1994 Personnel SORC membership has changed significantly with the addition of the new Plant Manager (Chairman), the new Engineering Manager and the new Operations Manager. These personnel have provided a fresh perspective to SORC and provide the appropriate higher safety standards required for continued performance improvement at CNS.
NLS940119 December 23. 1994 Personnel SORC membership has changed significantly with the addition of the new Plant Manager (Chairman), the new Engineering Manager and the new Operations Manager. These personnel have provided a fresh perspective to SORC and provide the appropriate higher safety standards required for continued performance improvement at CNS.
Independent Assessments in September 1994, a group was convened to review how other utilities conduct the onsite review function, including membership, procedures, and meeting methods. Recommendations from this group included:
Independent Assessments in September 1994, a group was convened to review how other utilities conduct the onsite review function, including membership, procedures, and meeting methods. Recommendations from this group included:
* Revise the controlling procedure to eliminate the ideatification of membership by specific ,
Revise the controlling procedure to eliminate the ideatification of membership by specific title to provide greater flexibility in establishing the SORC membership.
title to provide greater flexibility in establishing the SORC membership.
Implement a " qualified reviewer' process and/or the use of subcommittees to review and identify items requiring SORC review.
* Implement a " qualified reviewer' process and/or the use of subcommittees to review and identify items requiring SORC review.
Upgrade meeting minutes documentation.
* Upgrade meeting minutes documentation.
Clearly establish expectations for committee membership and for items being presented
* Clearly establish expectations for committee membership and for items being presented
-for SORC review.
                      -for SORC review.
These recommendations were accepted and corrective actions taken. They have led to improved efficiency and quality of SORC assessments.
These recommendations were accepted and corrective actions taken. They have led to improved           ,
Also in September 1994, the District brought onsite a recognized authority in the area of nuclear performance assessment and independent oversight improvement to serve as a mentor and coach to the SORC.
efficiency and quality of SORC assessments.                                                           l Also in September 1994, the District brought onsite a recognized authority in the area of nuclear performance assessment and independent oversight improvement to serve as a mentor and coach to the SORC. The initial task of the mentor, however, was to synthesize and evaluate information contained in the DSAT report pertaining to independent assessment activities, including the SORC. This task was performed in conjunction with the external members of the Safety Review and Audit Board (SRAB). During this effon. several weaknesses were revealed regarding independent assessment. These matters have been addressed through the SORC-specific issues that are addressed in the Phase 1 Action Plan Issue closecut (Item 1.2).
The initial task of the mentor, however, was to synthesize and evaluate information contained in the DSAT report pertaining to independent assessment activities, including the SORC. This task was performed in conjunction with the external members of the Safety Review and Audit Board (SRAB). During this effon. several weaknesses were revealed regarding independent assessment. These matters have been addressed through the SORC-specific issues that are addressed in the Phase 1 Action Plan Issue closecut (Item 1.2).
On September 23. 1994, CNS Quality Assurance (QA) issued an assessment report to the site manager on SORC. In sum, the QA concerns and recommendations were consistent with
On September 23. 1994, CNS Quality Assurance (QA) issued an assessment report to the site manager on SORC. In sum, the QA concerns and recommendations were consistent with conclusions reached by other assessment organizations.
;            conclusions reached by other assessment organizations. On October 27, 1994, the Plant Manager responded to QA by outlining actions that would be, or had been taken, on the stated j           concerns. QA has since determined that the Plant Manager's actions are acceptable.
On October 27, 1994, the Plant Manager responded to QA by outlining actions that would be, or had been taken, on the stated j
t I
concerns. QA has since determined that the Plant Manager's actions are acceptable.
I l
t


  ~
~
  ,        NLS940119 December 23. 1994 Mentorshin Since mid-September, the SORC mentortcoach has worked with CNS line managers to enhance the ef fectiveness of oversight meetings through various activities. including frequent attendance at meetings, commentary on meeting proceedings and content, promulgation of oversight expectations, individual coaching and feedback for the SORC members, input into Procedure 0.3 revisions, and assumption of a lead role in the development of a training course for the SORC presenters. Also, the mentor / coach has worked closely with new managers throughout their transition at CNS.
NLS940119 December 23. 1994 Mentorshin Since mid-September, the SORC mentortcoach has worked with CNS line managers to enhance the ef fectiveness of oversight meetings through various activities. including frequent attendance at meetings, commentary on meeting proceedings and content, promulgation of oversight expectations, individual coaching and feedback for the SORC members, input into Procedure 0.3 revisions, and assumption of a lead role in the development of a training course for the SORC presenters. Also, the mentor / coach has worked closely with new managers throughout their transition at CNS.
Procedure Modification On November 3,1994, Procedure 0.3. " Station Operations Review Committee" was revised to describe SORC activities more accurately. Changes included the following.
Procedure Modification On November 3,1994, Procedure 0.3. " Station Operations Review Committee" was revised to describe SORC activities more accurately. Changes included the following.
* Based SORC membership on disciplines (as described in Technical Specifications).
Based SORC membership on disciplines (as described in Technical Specifications).
Previously. SORC membership was cased on position titles.
Previously. SORC membership was cased on position titles.
* Utilization of a matrix format ta it entify primary and altemate members of the SORC.
Utilization of a matrix format ta it entify primary and altemate members of the SORC.
* SORC's primary responsibility was cla.Med to focus on issues relevant to nuclear safety, and to ensure that nuclear safety implications are recognized and properly addressed.
SORC's primary responsibility was cla.Med to focus on issues relevant to nuclear safety, and to ensure that nuclear safety implications are recognized and properly addressed.
Trainine A training course for SORC members and alternates was presented to address the fundamentals of nuclear safety concepts and culture. The training program consisted of two full days in the classroom and covered all aspects of nuclear safety from fundamental philosophy to the bases for design and licensing, in addition. performance-based concepts and evaluanon techniques were presented in the training to provide essential skills for applying critical, results-oriented thinking and evaluation techniques for technical, administrative. and organizational problems.
Trainine A training course for SORC members and alternates was presented to address the fundamentals of nuclear safety concepts and culture. The training program consisted of two full days in the classroom and covered all aspects of nuclear safety from fundamental philosophy to the bases for design and licensing, in addition. performance-based concepts and evaluanon techniques were presented in the training to provide essential skills for applying critical, results-oriented thinking and evaluation techniques for technical, administrative. and organizational problems.
Also, the cours.: led to improved insight by SORC members of potential safety impacts of reviewed informanon.
Also, the cours.: led to improved insight by SORC members of potential safety impacts of reviewed informanon.
Conclusion The District recognizes that the quality of the function that SORC performs is dependent on the attitude of its members, as well as. controlling procedures and processes. Procedures and processes can be changed, but the key ingredient to the success of SORC is the ability to
Conclusion The District recognizes that the quality of the function that SORC performs is dependent on the attitude of its members, as well as. controlling procedures and processes. Procedures and processes can be changed, but the key ingredient to the success of SORC is the ability to


  .        NIE940119 December 23. 1994 differentiate between line-management functions and those of independent assessment.
NIE940119 December 23. 1994 differentiate between line-management functions and those of independent assessment.
Consistent with this approach, new SORC prsonnel already have improved SORC effectiveness.
Consistent with this approach, new SORC prsonnel already have improved SORC effectiveness.
Items are being presented in more effective ways, and deliberations are clearly focused on nuclear safety. Improved processes and procedures have led to increased efficiency. The actions desenbed in this letter also have resulted in the appropriate intrusive attitude regarding issues being discussed.
Items are being presented in more effective ways, and deliberations are clearly focused on nuclear safety. Improved processes and procedures have led to increased efficiency. The actions desenbed in this letter also have resulted in the appropriate intrusive attitude regarding issues being discussed.
As a final note. the District notes its awareness that it must ensure that SORC members have the proper priority between SORC activities and routine job activities. Without this protocol, unacceptable backlogs in SORC issues or work activities could result. The combined actions discussed in this letter respond to NRC concerns. More importantly, these actions respond to what District management believes is necessary for a successfully functioning SORC. Based on the actions that we have taken, the District concludes that all restart issues pertaining to SORC have been resolved.
As a final note. the District notes its awareness that it must ensure that SORC members have the proper priority between SORC activities and routine job activities. Without this protocol, unacceptable backlogs in SORC issues or work activities could result. The combined actions discussed in this letter respond to NRC concerns. More importantly, these actions respond to what District management believes is necessary for a successfully functioning SORC. Based on the actions that we have taken, the District concludes that all restart issues pertaining to SORC have been resolved.
Sinc 6 rely,
Sinc 6 rely,
                  / o-G. R Horn
/ o-G. R Horn i\\ ke-President. Nuclear ec:
          \ ike-President. Nuclear ec:     U. S. Nuclear Regulatory Commission Attention: Document Control Desk NRC Resident Inspector Office Cooper Nuclear Station NPG Distribution l
U. S. Nuclear Regulatory Commission Attention: Document Control Desk NRC Resident Inspector Office Cooper Nuclear Station NPG Distribution N,
l l
N,


o-I g
o-
  $      [(T* Ctg     t                           UNITED STATES g      20 - ,g           NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20 % 5-0001
[(T* Ctg I g t
          ,            f
UNITED STATES NUCLEAR REGULATORY COMMISSION 20 -
            % ,,[g /                                   February 9, 1995 MEMORANDUM T0:     Files                                                   )
,g g
FROM:
f WASHINGTON, D.C. 20 % 5-0001
James       R. Hall,IV-1 Project Directorate      Senior Project   / Manager ()M Division of Reactor Projects III/IV U
%,,[g /
February 9, 1995 MEMORANDUM T0:
Files
)
James R. Hall, Senior Project Manager ()M FROM:
Project Directorate IV-1
/
Division of Reactor Projects III/IV U


==SUBJECT:==
==SUBJECT:==
CLOSURE OF NRR COOPER RESTART ITEMS 1
CLOSURE OF NRR COOPER RESTART ITEMS 1
The purpose of this memorandum is to document the administrative closure of several items assigned to NRR in the Cooper Restart Action Plan, dated December 21, 1994. These items are identified in the Action Plan Case Specific Checklists, Parts I and II, as specified below.
The purpose of this memorandum is to document the administrative closure of several items assigned to NRR in the Cooper Restart Action Plan, dated December 21, 1994.
These items are identified in the Action Plan Case Specific Checklists, Parts I and II, as specified below.
Case Specific Checklist - Part I:
Case Specific Checklist - Part I:
B.2,a -     Issue Daily and Director's Highlights Copies of all NRR Director's Highlights on Cooper since 8/1/94 were sent to Region IV/DRP (T. Reis) for inclusion in the restart file on 2/3/95.
B.2,a -
8.4.5.b -   NRC Evaluation of Applicable Items from Section C " ISSUES"
Issue Daily and Director's Highlights Copies of all NRR Director's Highlights on Cooper since 8/1/94 were sent to Region IV/DRP (T. Reis) for inclusion in the restart file on 2/3/95.
    <                            Complete This memorandum documents NRR completion of those items on Part II of the Case Specific Checklist, as discussed below.
8.4.5.b -
B.4.5.f - Comments from Other Parties Considered A January 20, 1995, note to file from Daniel M. Barss, NRR, documented his discussions with FEMA officials regarding the proposed restart of the Cooper Nuclear Station. Neither FEMA Headquarters nor FEMA Region VII personnel had any offsite emergency preparedness concerns that would affect the proposed restart of Cooper. By letter dated January 25, 1995, Mr. John A. Miller, FEMA Region VII Director, notified the State of Nebraska that the deficiency identified in the November 16, 1994, emergency exercise at Cooper had been corrected,                           j l
NRC Evaluation of Applicable Items from Section C " ISSUES" Complete This memorandum documents NRR completion of those items on Part II of the Case Specific Checklist, as discussed below.
B.4.6.1 -   Applicable License Amendments Have Been Issued On February 3, 1995, the staff issued Amendment No. 168 for Cooper,         l revising the Technical Specification definition for Limiting Conditions for Operation. All amendments necessary to support restart have now been issued.                                                             .I B.4.6.2 -   Applicable Exemptions Have Been Granted m
B.4.5.f - Comments from Other Parties Considered A January 20, 1995, note to file from Daniel M. Barss, NRR, documented his discussions with FEMA officials regarding the proposed restart of the Cooper Nuclear Station. Neither FEMA Headquarters nor FEMA Region VII personnel had any offsite emergency preparedness concerns that would affect the proposed restart of Cooper.
Based on our review of the licensee's letter dated January 26, 1995, NRR   l concludes that no specific exemptions are required prior to allowing
By {{letter dated|date=January 25, 1995|text=letter dated January 25, 1995}}, Mr. John A. Miller, FEMA Region VII Director, notified the State of Nebraska that the deficiency identified in the November 16, 1994, emergency exercise at Cooper had been corrected, j
            -        rem L             D     f l
l B.4.6.1 -
Applicable License Amendments Have Been Issued On February 3, 1995, the staff issued Amendment No. 168 for Cooper, revising the Technical Specification definition for Limiting Conditions for Operation. All amendments necessary to support restart have now been issued.
.I B.4.6.2 -
Applicable Exemptions Have Been Granted Based on our review of the licensee's {{letter dated|date=January 26, 1995|text=letter dated January 26, 1995}}, NRR m
concludes that no specific exemptions are required prior to allowing rem L
D f
l


r 1
r 1
9 i
9 i
i                                                                   Cooper restart. NRR is continuing to review certain generic issues that may be applicable to Cooper; those issues will be pursued when the staff's positions are determined.
.i Cooper restart.
B.4.6.3 -     Applicable Reliefs Have Been Granted On February 7,1995, NRR granted a relief. request to allow the HPCI turbine exhaust branch line weld to remain in service for the remainder of the current 10-year ISI interval (through the next refueling outage).
NRR is continuing to review certain generic issues that may be applicable to Cooper; those issues will be pursued when the staff's positions are determined.
B.4.6.3 -
Applicable Reliefs Have Been Granted On February 7,1995, NRR granted a relief. request to allow the HPCI turbine exhaust branch line weld to remain in service for the remainder of the current 10-year ISI interval (through the next refueling outage).
No other reliefs are required prior to restart.
No other reliefs are required prior to restart.
B.S.c -       No Restart Objections From Other Applicable HQ Offices The Cooper Restart Panel believes that all significant enforcement issues have been sufficiently resolved to allow restart; however, NRR asked the Office of Enforcement if OE had any objection to restart (R. Hall conversation with J. Beall, 2/3/95; no response received). In addition, OCA was notified of Cooper's proposed restart date (R. Hall conversation with T. Madden, 1/31/95; no comments received).
B.S.c -
B.5 d -       No Restart Objections from Applicable Federal Agencies FEMA was the only " applicable" Federal agency identified by the Restart Panel for consultation concerning Cooper restart; FEMA expressed no objections, as described in item B.4.5.f above.
No Restart Objections From Other Applicable HQ Offices The Cooper Restart Panel believes that all significant enforcement issues have been sufficiently resolved to allow restart; however, NRR asked the Office of Enforcement if OE had any objection to restart (R. Hall conversation with J. Beall, 2/3/95; no response received).
B 5.h -       Conduct ACRS Briefing / Notification NRR contacted ACRS staff in December 1994, to determine if a briefing was desired. On February 1, 1995, ACRS staff indicated that the ACRS does not normally request a briefing on plants shut down for less than one year; the ACRS staff will notify NRR if a briefing is desired at some point after Cooper restart (D. Coe, ACRS, Email to R. Hall).
In addition, OCA was notified of Cooper's proposed restart date (R. Hall conversation with T. Madden, 1/31/95; no comments received).
B.5.1.1 -     Coordination with Interested Agencies / Parties - FEMA See item B.4.5.f above.
B.5 d -
No Restart Objections from Applicable Federal Agencies FEMA was the only " applicable" Federal agency identified by the Restart Panel for consultation concerning Cooper restart; FEMA expressed no objections, as described in item B.4.5.f above.
B 5.h -
Conduct ACRS Briefing / Notification NRR contacted ACRS staff in December 1994, to determine if a briefing was desired. On February 1, 1995, ACRS staff indicated that the ACRS does not normally request a briefing on plants shut down for less than one year; the ACRS staff will notify NRR if a briefing is desired at some point after Cooper restart (D. Coe, ACRS, Email to R. Hall).
B.5.1.1 -
Coordination with Interested Agencies / Parties - FEMA See item B.4.5.f above.
Case Specific Checklist - Part II:
Case Specific Checklist - Part II:
Item 10.e - Modification to Add REC Containment Isolation Valves This issue was identified by the licensee in their Operating Experience Review of NRC IN 89-55, which addressed the potential vulnerability of REC piping to a HELB, and the subsequent potential for loss of containment isolation capability. Based on discussions with NRR/SCSB (R. Barrett, J. Pulsipher, W. Long) it appears that the scenario for IN 89-55 is beyond Cooper's licensing basis. The licensee has developed an internal position paper based on a probabilistic safety assessment       -
Item 10.e - Modification to Add REC Containment Isolation Valves This issue was identified by the licensee in their Operating Experience Review of NRC IN 89-55, which addressed the potential vulnerability of REC piping to a HELB, and the subsequent potential for loss of containment isolation capability.
w I
Based on discussions with NRR/SCSB (R. Barrett, J. Pulsipher, W. Long) it appears that the scenario for IN 89-55 is beyond Cooper's licensing basis.
The licensee has developed an internal position paper based on a probabilistic safety assessment w
I


'.,        3:
3:
            ~
~
1r)                                                                                           l
1r)
?:                                                                                         i
?:
: i.                                                                                         i
i i.
    --                                                            (PSA), which concludes that modifications are not required for compliance with the license and would not result in a significant benefit to safety.
(PSA), which concludes that modifications are not required for compliance with the license and would not result in a significant benefit to safety.
On May 24, 1994, Region III submitted a TIA to NRR addressing this same issue for the Dresden station. That TIA requested an NRR position for     ,
On May 24, 1994, Region III submitted a TIA to NRR addressing this same issue for the Dresden station.
this issue, which appears to be generic for several Mark I BWRs,           ,
That TIA requested an NRR position for this issue, which appears to be generic for several Mark I BWRs, including Brown's Ferry.
including Brown's Ferry. NRR is currently reviewing the TIA and the       '
NRR is currently reviewing the TIA and the final staff position will be evaluated for applicability to Cooper.
final staff position will be evaluated for applicability to Cooper.
Based on this information, this item is not considered a startup issue for Cooper.
Based on this information, this item is not considered a startup issue for Cooper.                                                                .
Item 12 -
Item 12 -   Exceeding Cooldown Rate This item involved a review of LER 94-015, Revision 1, which described several instances where limits on reactor vessel heatup and cooldown rates were exceeded. NRR has reviewed the licensee's detailed analyses of these events (licensee restart item No. 7.3), and has found the analyses acceptable, as documented in a memorandum from J. Strosnider to W. Beckner, dated February 6, 1995.
Exceeding Cooldown Rate This item involved a review of LER 94-015, Revision 1, which described several instances where limits on reactor vessel heatup and cooldown rates were exceeded.
Item 13 - FEMA Concern The identified FEMA deficiency from the November 16, 1994, emergency exercise at Cooper has been adequately resolved, as discussed in the January 25, 1995, letter from John A. Miller, FEMA Region VII Director, to Richard Semm, Nebraska State Civil Defense Agency (See also Item B.4.5.f above).
NRR has reviewed the licensee's detailed analyses of these events (licensee restart item No. 7.3), and has found the analyses acceptable, as documented in a memorandum from J. Strosnider to W. Beckner, dated February 6, 1995.
Item 13 - FEMA Concern The identified FEMA deficiency from the November 16, 1994, emergency exercise at Cooper has been adequately resolved, as discussed in the {{letter dated|date=January 25, 1995|text=January 25, 1995, letter}} from John A. Miller, FEMA Region VII Director, to Richard Semm, Nebraska State Civil Defense Agency (See also Item B.4.5.f above).
Docket No. 50-298
Docket No. 50-298
        %=
%=


~
~
p*no ve d-     p             4                         UNITED STATES D
p*nove d-p 4
  *  {3 j           NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20066-4001
UNITED STATES D
        $s *1 Jecember 12, 1994 EA Nos. 94-164, 94-165, 94-166 Nebraska Public Power District ATTN: Guy R. Horn Vice President - Nuclear Post Office Box 499 Columbus, Nebraska 68602-0499
{
j NUCLEAR REGULATORY COMMISSION 3
WASHINGTON, D.C. 20066-4001
$s
*1 Jecember 12, 1994 EA Nos.
94-164, 94-165, 94-166 Nebraska Public Power District ATTN: Guy R. Horn Vice President - Nuclear Post Office Box 499 Columbus, Nebraska 68602-0499


==SUBJECT:==
==SUBJECT:==
NOTICE OF VIOLATION AND PROPOSED IMPOSITION OF CIVIL PENALTIES -
NOTICE OF VIOLATION AND PROPOSED IMPOSITION OF CIVIL PENALTIES -
                            $300,000 (NRC Inspection Report Nos. 50-298/94-14, 50-298/94-16, 50-298/94-19)
$300,000 (NRC Inspection Report Nos. 50-298/94-14, 50-298/94-16, 50-298/94-19)
This refers to three inspections conducted from May 23, 1994, to August 12, 1994, at the Cooper Nuclear Station (CNS) facility, near Brownville, Nebraska.
This refers to three inspections conducted from May 23, 1994, to August 12, 1994, at the Cooper Nuclear Station (CNS) facility, near Brownville, Nebraska.
These inspections were conducted specifically to review the circumstances involving: 1) the identification, in May and June, 1994, by the CNS staff of numerous primary containment penetrations that were installed in configurations that were contrary to NRC requirements and never had been local leak rate tested; 2) the circumstances surrounding the declaration of a Notification of Unusual Event and plant shutdown on May 25, 1994, because both emergency diesel generators were declared inoperable; and 3) the identification by the CNS staff of numerous hardware deficiencies that resulted in the failure of the control room envelope pressurization test on April 11,1994. The reports documenting the results of these inspections were sent to you on September 2, 1994 (50-298/94-14), September 12, 1994 (50-298/94-16), and September 9, 1994 (50-298/94-19). On September 16, 1994, you and other Nebraska Public Power District (NPPD) representatives attended an enforcement conference, which was open to public observation in accordance with the Commissions's continuing trial program, in the NRC's Region IV office to discuss NRC's preliminary conclusion that significant violations of NRC requirements and plant Technical Specifications (TS) had occurred.
These inspections were conducted specifically to review the circumstances involving:
On the basis of the information developed during the inspections and the information provided during the enforcement conference, the NRC has determined that a number of significant violations of NRC requirements occurred.
: 1) the identification, in May and June, 1994, by the CNS staff of numerous primary containment penetrations that were installed in configurations that were contrary to NRC requirements and never had been local leak rate tested; 2) the circumstances surrounding the declaration of a Notification of Unusual Event and plant shutdown on May 25, 1994, because both emergency diesel generators were declared inoperable; and 3) the identification by the CNS staff of numerous hardware deficiencies that resulted in the failure of the control room envelope pressurization test on April 11,1994. The reports documenting the results of these inspections were sent to you on September 2, 1994 (50-298/94-14), September 12, 1994 (50-298/94-16), and September 9, 1994 (50-298/94-19). On September 16, 1994, you and other Nebraska Public Power District (NPPD) representatives attended an enforcement conference, which was open to public observation in accordance with the Commissions's continuing trial program, in the NRC's Region IV office to discuss NRC's preliminary conclusion that significant violations of NRC requirements and plant Technical Specifications (TS) had occurred.
Enclosure 1 contains a Notice of Violation and Proposed Imposition of Civil Ponalties (Notice) s.nat describes these violations which have been grouped into the following three problem areas, each problem being associated with the safety-related system that was affected:
On the basis of the information developed during the inspections and the information provided during the enforcement conference, the NRC has determined that a number of significant violations of NRC requirements occurred. contains a Notice of Violation and Proposed Imposition of Civil Ponalties (Notice) s.nat describes these violations which have been grouped into the following three problem areas, each problem being associated with the safety-related system that was affected:
Problem I.A consists of violations related to the primary containment system and the failure to 'naintain the system operable in accordance with the requirements of the plant TS, the failure to adequately test the system in accordance with the requirements of 10 CFR Part 50, Appendix B, Criterion XI, and the failure to maintain an adequate design control of the system in accordance with the requirements of 10 CFR Part 50, Appendix B, Criterion III.     These failures to test and maintain the
Problem I.A consists of violations related to the primary containment system and the failure to 'naintain the system operable in accordance with the requirements of the plant TS, the failure to adequately test the system in accordance with the requirements of 10 CFR Part 50, Appendix B, Criterion XI, and the failure to maintain an adequate design control of the system in accordance with the requirements of 10 CFR Part 50, Appendix B, Criterion III.
    %Q&DC'(p
These failures to test and maintain the
%Q&DC'(p


                                                                                                      .y
.y p
  ,  p Q,
Q, Nebraska Public Power District,
Nebraska Public Power District                                                                                                                       ,
. primary containment system resulted in containment integrity not.being' maintained at all times when required because the surveillance requirements for the local' leak rate testing of. 82 components.had never.
                        . primary containment system resulted in containment integrity not.being' maintained at all times when required because the surveillance requirements for the local' leak rate testing of. 82 components .had never.      .
.been implemented within the specified surveillance frequency.and, when
                        .been implemented within the specified surveillance frequency.and, when           '
. testing was eventually performed, containment leak rate limits.were exceeded.
                        . testing was eventually performed, containment leak rate limits .were exceeded.
Problem I.B consists of violations associated with the 480 volt and 4160 volt critical buses and the failure to maintain the systems operable in.-
Problem I.B consists of violations associated with the 480 volt and 4160 volt critical buses and the failure to maintain the systems operable in.-
accordance with the requirements.of the plant TS and the failure to             ,
accordance with the requirements.of the plant TS and the failure to adequately test the systems in accordance with the requirements of 10 2
adequately test the systems in accordance with the requirements of 10           2 CFR Part 50, Appendix B, Criterion XI. Specifically, CNS had ' failed to         !
CFR Part 50, Appendix B, Criterion XI. Specifically, CNS had ' failed to test undervoltage relays associated with the 480 volt and 4160 volt critical buses and because of these failures, the buses have not been capable of performing their safety-related function since operation of the station commenced January 18, 1974.
test undervoltage relays associated with the 480 volt and 4160 volt critical buses and because of these failures, the buses have not been           -
t Problem I.C consists of violations pertaining to the control room emergency filter system and the failure to maintain the system operable in accordance with the requirements of the plant TS-and the failure to adequately test the system in accordance with the requirements of 10 CFR
capable of performing their safety-related function since operation of the station commenced January 18, 1974.
-Part 50, Appendix B, Criterion XI. As.a result of these failures, from June 1989 until April 28, 1994, the control room emergency filter system was not operable at all times when required because testing failed to demonstrate that a positive pressure could be maintained in the control room during the periodic performance of the control room envelope.
t                       Problem I.C consists of violations pertaining to the control room emergency filter system and the failure to maintain the system operable in accordance with the requirements of the plant TS-and the failure to adequately test the system in accordance with the requirements of 10 CFR
                        -Part 50, Appendix B, Criterion XI. As.a result of these failures, from June 1989 until April 28, 1994, the control room emergency filter system         ;
was not operable at all times when required because testing failed to demonstrate that a positive pressure could be maintained in the control room during the periodic performance of the control room envelope .
pressurization test.
pressurization test.
At the September 16 enforcement conference, NPPD characterized the violations associated with the operability of these systems as having minimal safety               -
At the September 16 enforcement conference, NPPD characterized the violations associated with the operability of these systems as having minimal safety significance but acknowledged the regulatory significance of the violations, both individually and collectively. However, it is NRC's view that all of the identified violations associated with the three problems represent significant safety issues.
significance but acknowledged the regulatory significance of the violations, both individually and collectively. However, it is NRC's view that all of the           ,
Further, NRC agrees.that the violations are of regulatory significance and provide a sufficient basis for the issuance of the three Severity Level III problems.
identified violations associated with the three problems represent significant safety issues. Further, NRC agrees.that the violations are of regulatory significance and provide a sufficient basis for the issuance of the three               :
Severity Level III problems.                                                             !
The NRC believes that chronic and fundamental weaknesses have negatively affected the safety performance of the CNS facility for an unacceptable 1y long period of time. The description and bases for our concerns with these problems are contained-in Enclosure 2.
The NRC believes that chronic and fundamental weaknesses have negatively affected the safety performance of the CNS facility for an unacceptable 1y long period of time. The description and bases for our concerns with these problems are contained-in Enclosure 2.
The results of NPPD's and NRC's inspections into the causes of these                     '
The results of NPPD's and NRC's inspections into the causes of these violations. confirm the NRC's concerns about the effectiveness of NPPD's management of and processes for ensuring that safety systems and components
violations. confirm the NRC's concerns about the effectiveness of NPPD's management of and processes for ensuring that safety systems and components             .i are sufficiently maintained, tested, and controlled such that these systems             >
.i are sufficiently maintained, tested, and controlled such that these systems and components will perform as intended if called upon to mitigate the I
and components will perform as intended if called upon to mitigate the consequences of an accident. NPPD's and NRC's inspections detemined that the             I following inadequacies caused or contributed to the occurrence of these                 ,
consequences of an accident. NPPD's and NRC's inspections detemined that the following inadequacies caused or contributed to the occurrence of these violations: the continuing practice of inappropriately preconditioning plant hardware to obtain satisfactory test results, which was previously identified i-5 P
violations: the continuing practice of inappropriately preconditioning plant hardware to obtain satisfactory test results, which was previously identified i-                                                                                                       !
.m..
5 P
,,y c _.,.
        .m..     ,            ,,y , _ _ . _ , . , . , , . . .


t Nebraska Public Power District                       by the NRC in 1993; a continuing failure by NPPD to adequately address identified hardware deficiencies without NRC involvement and prompting; insufficient management oversight, guidance, and monitoring relative to test and design control programs; a failure to identify original design errors; inadequate maintenance and surveillance procedures; and inadequate post-maintenance testing.
t Nebraska Public Power District
* by the NRC in 1993; a continuing failure by NPPD to adequately address identified hardware deficiencies without NRC involvement and prompting; insufficient management oversight, guidance, and monitoring relative to test and design control programs; a failure to identify original design errors; inadequate maintenance and surveillance procedures; and inadequate post-maintenance testing.
During the September 16 enforcement conference, NPPD acknowledged the need for strong, broad-based corrective actions in addition to correcting the specific violations. NRC agrees that broad-based corrective actions are essential.
During the September 16 enforcement conference, NPPD acknowledged the need for strong, broad-based corrective actions in addition to correcting the specific violations. NRC agrees that broad-based corrective actions are essential.
However, the violations that are the subject of this action are similar to violations identified by NRC as early as 1992, and the corrective actions taken to resolve those past problems have been less than fully effective in preventing the recurrence of similar problems. While NRC does not take issue with any of the licensee-identified causes of the violations, NRC believes that the root causes of these violations are more fundamental. Specifically, these violations are indicative of the long-term failure of senior NPPD       ,
However, the violations that are the subject of this action are similar to violations identified by NRC as early as 1992, and the corrective actions taken to resolve those past problems have been less than fully effective in preventing the recurrence of similar problems. While NRC does not take issue with any of the licensee-identified causes of the violations, NRC believes that the root causes of these violations are more fundamental.
managers to: 1) implement effective safety processes and procedures; 2) institute a positive station-wide attitude towards identifying and correcting problems; 3) provide effective oversight and monitoring of the CNS staff and   '
Specifically, these violations are indicative of the long-term failure of senior NPPD managers to:
programs in order to ensure a high level of safety performance at CNS; and 4) instill and maintain an attitude among plant staff that emphasizes plant safety.
: 1) implement effective safety processes and procedures; 2) institute a positive station-wide attitude towards identifying and correcting problems; 3) provide effective oversight and monitoring of the CNS staff and programs in order to ensure a high level of safety performance at CNS; and 4) instill and maintain an attitude among plant staff that emphasizes plant safety.
We understand that the actions taken to correct these problems include the following: 1) for Problem I.A, you have taken steps to resolve the design and testing problems and established a program owner and basis document to comply with the requirements of Appendix J of 10 CFR Part 50; 2) for Problem I.B, you have identified and tested all of the affected critical circuits, evaluated and/or tested the remaining circuits, and you have completed, or are in the process of completing a multi-discipline review of your Operational Experience Review Program; 3) for Problem I.C, you installed hardware modifications; and 4) as to each of these problems, you initiated safety culture improvements, revised testing procedures, and expedited design basis reconstitution. In addition, further corrective steps that NRC has required to be taken are outlined in Confirmatory Action Letters 4-94-06, 4-94-06A, 4-94-06B, and 4-94-08. These steps include defining the design basis for your surveillance testing program such that each structure, system, or component is properly tested to validate that it can perform its intended design function, confirming that all discrepancies associated with the primary containment system have been resolved, describing the actions taken to prevent recurrence of the installation of devices that prevent the actuation of safety-related systems, and confirming that inservice inspection of penetration welds are adequately implemented.
We understand that the actions taken to correct these problems include the following:
: 1) for Problem I.A, you have taken steps to resolve the design and testing problems and established a program owner and basis document to comply with the requirements of Appendix J of 10 CFR Part 50;
: 2) for Problem I.B, you have identified and tested all of the affected critical circuits, evaluated and/or tested the remaining circuits, and you have completed, or are in the process of completing a multi-discipline review of your Operational Experience Review Program; 3) for Problem I.C, you installed hardware modifications; and 4) as to each of these problems, you initiated safety culture improvements, revised testing procedures, and expedited design basis reconstitution.
In addition, further corrective steps that NRC has required to be taken are outlined in Confirmatory Action Letters 4-94-06, 4-94-06A, 4-94-06B, and 4-94-08. These steps include defining the design basis for your surveillance testing program such that each structure, system, or component is properly tested to validate that it can perform its intended design function, confirming that all discrepancies associated with the primary containment system have been resolved, describing the actions taken to prevent recurrence of the installation of devices that prevent the actuation of safety-related systems, and confirming that inservice inspection of penetration welds are adequately implemented.
Nevertheless, to clearly emphasize the need for senior NPPD managers to identify and undertake sustained actions to improve the overall level of safety performance at CNS, I have been authorized, after consultation with the Comission, to issue the enclosed Notice of Violation and Proposed Imposition of Civil Penalties (Notice) in the amount of $300,000 for the three Severity Level III problems described above, in Enclosure 2, and in the Notice.
Nevertheless, to clearly emphasize the need for senior NPPD managers to identify and undertake sustained actions to improve the overall level of safety performance at CNS, I have been authorized, after consultation with the Comission, to issue the enclosed Notice of Violation and Proposed Imposition of Civil Penalties (Notice) in the amount of $300,000 for the three Severity Level III problems described above, in Enclosure 2, and in the Notice.


Nebraska Public Power District                                                                                                     The base value of a civil penalty for a Severity Level III problem is $50,000.
Nebraska Public Power District The base value of a civil penalty for a Severity Level III problem is $50,000.
Normal application of the enforcement policy could have resulted in significantly higher civil penalty amounts for each of the three Severity Level III problems cited in the Notice. For example, 100% escalation for each problem would be warranted for each of the following factors: 1) past performance, as exhibited by NPPO's poor performance in the areas of problem identification and resolution, maintenance, surveillance +et ting, and engineering; 2) prior opportunity to identify or prevent & violations because NPPD had multiple prior opportunities to identify and prevent the violations composing Problems I.A., I.B., and I.C.; and 3) duration of the violations, because the violations composing Problems I.A., I.B., and I.C.
Normal application of the enforcement policy could have resulted in significantly higher civil penalty amounts for each of the three Severity Level III problems cited in the Notice.
have existed for many years. Based on these three factors alone, the adjustment factors could have been applied to increase the proposed civil penalty by 300% for each of the problems. However, in light of your initiative to shut down the plant until you could successfully implement an extensive improvement program to address the underlying root causes of performance deficiencies, your commitment not to restart the plant without prior NRC approval, and your significant changes in management oversight of licensed activities, the NRC has decided to exercise broad discretion, pursuant to paragraph VII.B.6. of the Enforcement Policy, and set the civil                                                                 4 penalty at $100,000 for each of the Severity Level III problems. Therefore,                                                                 i the total proposed penalty for this action is $300,000.
For example, 100% escalation for each problem would be warranted for each of the following factors:
                                                                                                                                                  ]
: 1) past performance, as exhibited by NPPO's poor performance in the areas of problem identification and resolution, maintenance, surveillance +et ting, and engineering; 2) prior opportunity to identify or prevent & violations because NPPD had multiple prior opportunities to identify and prevent the violations composing Problems I.A., I.B., and I.C.; and 3) duration of the violations, because the violations composing Problems I.A.,
I.B., and I.C.
have existed for many years.
Based on these three factors alone, the adjustment factors could have been applied to increase the proposed civil penalty by 300% for each of the problems. However, in light of your initiative to shut down the plant until you could successfully implement an extensive improvement program to address the underlying root causes of performance deficiencies, your commitment not to restart the plant without prior NRC approval, and your significant changes in management oversight of licensed activities, the NRC has decided to exercise broad discretion, pursuant to paragraph VII.B.6. of the Enforcement Policy, and set the civil 4
penalty at $100,000 for each of the Severity Level III problems. Therefore, i
the total proposed penalty for this action is $300,000.
]
In addition to the violations discussed above, the Notice contains two Severity Level IV violations which have not been assessed a civil penalty.
In addition to the violations discussed above, the Notice contains two Severity Level IV violations which have not been assessed a civil penalty.
These violations involve: 1) the failure to update the safety-related drawing list in accordance with an engineering procedure; and 2) the failure to                                                                     l maintain an appropriate procedure for the preventive maintenance of 480-volt circuit breakers.
These violations involve:
NPPD is required to respond to this letter and should follow the instructions specified in the enclosed Notice when preparing its response. In its response, NPPD should document the specific actions taken and any additional actions it plans to prevent recurrence. After reviewing the response to this Notice, including proposed corrective actions and the results of future inspections, the NRC will determine whether further NRC enforcement action is necessary to ensure compliance with NRC regulatory requirements.
: 1) the failure to update the safety-related drawing list in accordance with an engineering procedure; and 2) the failure to l
maintain an appropriate procedure for the preventive maintenance of 480-volt circuit breakers.
NPPD is required to respond to this letter and should follow the instructions specified in the enclosed Notice when preparing its response.
In its response, NPPD should document the specific actions taken and any additional actions it plans to prevent recurrence. After reviewing the response to this Notice, including proposed corrective actions and the results of future inspections, the NRC will determine whether further NRC enforcement action is necessary to ensure compliance with NRC regulatory requirements.
In accordance with 10 CFR 2.790 of the NRC's " Rules of Practice," a copy of this letter and its enclosure will be placed in the NRC Public Document Room (PDR). To the extent possible, your response should not include any personal privacy, proprietary, or safeguards information so that it can be placed in the PDR without redaction. However, if you find it necessary to include such information you should clearly indicate the specific information that you desire not to be ple.ced in the PDR, and, provide the legal basis to support your request for withholding the information from the public.
In accordance with 10 CFR 2.790 of the NRC's " Rules of Practice," a copy of this letter and its enclosure will be placed in the NRC Public Document Room (PDR). To the extent possible, your response should not include any personal privacy, proprietary, or safeguards information so that it can be placed in the PDR without redaction. However, if you find it necessary to include such information you should clearly indicate the specific information that you desire not to be ple.ced in the PDR, and, provide the legal basis to support your request for withholding the information from the public.
I
I J
_        _    _ _ _ _ _ _ _ _ _ _ _ _ _                                                                                      - - - . - J


Nebraska Public Power District           5
Nebraska Public Power District 5
          .The responses directed by this letter and the enclosed Notice are not subject to the clearance procedures of the Office of Management and Budget as' required by the Paperwork Reduction Act of 1980, Pub. L. No. 96-511.
.The responses directed by this letter and the enclosed Notice are not subject to the clearance procedures of the Office of Management and Budget as' required by the Paperwork Reduction Act of 1980, Pub. L. No. 96-511.
Sincerely,
Sincerely,
[
[s 4. IM ames L. Milhoan eputy Executive Director for uclear Reactor Regulation, Regional Operations, and Research Docket No.
s 4. IM ames L. Milhoan eputy Executive Director for uclear Reactor Regulation, Regional Operations, and Research Docket No. 50-298 License No. DPR-46 EAs 94-164, 94-165, 94-166
50-298 License No. DPR-46 EAs 94-164, 94-165, 94-166


==Enclosures:==
==Enclosures:==
1.-     Notice of Violation and Proposed Imposition of Civil Penalties
1.-
: 2. Description of the Severity Level III Problems
Notice of Violation and Proposed Imposition of Civil Penalties 2.
Description of the Severity Level III Problems


      .-                                                                                                  -t n
-t n
:<              Enclosure 1                      NOTICE OF VIOLATION                                   1 AND
NOTICE OF VIOLATION 1
,                                        PROPOSED IMPOSITION OF CIVIL PENALTIES Nebraska Public Power District-               Docket No. 50-298 Cooper Nuclear Station                         License No. DPR-46 EA Nos. 94-164, 94-165, 94-166 During NRC-inspections conducted from May 23, 1994, to August 12, 1994, violations of NRC requirements were identified. In accordance with the
AND PROPOSED IMPOSITION OF CIVIL PENALTIES Nebraska Public Power District-Docket No. 50-298 Cooper Nuclear Station License No. DPR-46 EA Nos.
                  " General Statement of Policy and Procedure for NRC Enforcement Actions,"               i 10 CFR Part 2, Appendix C, the Nuclear Regulatory Commission proposes to impose civil penalties pursuant to Section 234 of the Atomic Energy Act of 1954, as amended (Act), 42 U.S.C. 2282, and 10 CFR 2.205. The particular                 ,
94-164, 94-165, 94-166 During NRC-inspections conducted from May 23, 1994, to August 12, 1994, violations of NRC requirements were identified.
violations and associated civil penalties are set forth below:
In accordance with the
I. Violations Assessed A Civil Penalty A. 1. Technical Specification 3.7.A.2.a, " Containment Integrity,"
" General Statement of Policy and Procedure for NRC Enforcement Actions,"
states, in part, that " primary containment integrity shall be maintained at all times when the reactor is critical or when the reactor water temperature is above 212*F and when fuel is in the reactor vessel . . . ."
i 10 CFR Part 2, Appendix C, the Nuclear Regulatory Commission proposes to impose civil penalties pursuant to Section 234 of the Atomic Energy Act of 1954, as amended (Act), 42 U.S.C. 2282, and 10 CFR 2.205. The particular violations and associated civil penalties are set forth below:
Technical Specification Surveillance Requirement 4.7.A.2.f.1, " Leak Rate Testing," states, in part, y         that ". . . local leak rate tests (LLRTs) shall be performed on the primary containment testable penetrations and isolation valves at a pressure of 58 psig during each reactor shutdown for refueling, or other convenient intervals, but in no case'at intervals no greater than two years. . . .     The total acceptable leakage rate for all valves and penetrations other than the MSIVs (main steam.
I.
isolation valves] is 0.60 La."                                       ,
Violations Assessed A Civil Penalty A.
1.
Technical Specification 3.7.A.2.a, " Containment Integrity,"
states, in part, that " primary containment integrity shall be maintained at all times when the reactor is critical or when the reactor water temperature is above 212*F and when fuel is in the reactor vessel...."
Technical Specification Surveillance Requirement 4.7.A.2.f.1, " Leak Rate Testing," states, in part, y
that "... local leak rate tests (LLRTs) shall be performed on the primary containment testable penetrations and isolation valves at a pressure of 58 psig during each reactor shutdown for refueling, or other convenient intervals, but in no case'at intervals no greater than two years....
The total acceptable leakage rate for all valves and penetrations other than the MSIVs (main steam.
isolation valves] is 0.60 La."
Technical Specification 1.Y, " Surveillance Frequency,"
Technical Specification 1.Y, " Surveillance Frequency,"
states, in part, that " performance of a Surveillance
states, in part, that " performance of a Surveillance Requirement within the specified time interval shall constitute compliance with operability requirements for an i
,                                    Requirement within the specified time interval shall constitute compliance with operability requirements for an           i LCO [ limiting condition for operation) unless otherwise required by the specification."
LCO [ limiting condition for operation) unless otherwise required by the specification."
Contrary to the above, from January 18, 1974, until May 27, 1994, primary containment integrity was not maintained at             '
Contrary to the above, from January 18, 1974, until May 27, 1994, primary containment integrity was not maintained at all times when the reactor was critical or when the reactor water temperature was above 212*F and fuel was in the reactor vessel in that the Surveillance Requirement for the local leak rate testing of 82 components had never been implemented at an interval not to exceed two years. As the result of testing conducted on June 23, 1994, Isolation Valve IA-65CV (one of the 82 components) failed the LLRT, resulting in a total leakage value that significantly 1
all times when the reactor was critical or when the reactor water temperature was above 212*F and fuel was in the reactor vessel in that the Surveillance Requirement for the local leak rate testing of 82 components had never been implemented at an interval not to exceed two years. As the result of testing conducted on June 23, 1994, Isolation Valve IA-65CV (one of the 82 components) failed the LLRT, resulting in a total leakage value that significantly                 '
exceeded the 0.60 La limit.
1 exceeded the 0.60 La limit. The 0.60 La limit corresponds to a leakage rate of 5.37 scmh (189.60 scfh). The LLRT                 !
The 0.60 La limit corresponds to a leakage rate of 5.37 scmh (189.60 scfh). The LLRT i
i rs,,en11( A V)
rs,,en11( A V)
"- - l ' ( \ g/ [ 'Wd t/g/                                                                                   )
"- - l ' ( \\ g/ [ 'Wd t/g/
)
l
l


y           + .+.   .a..         m>   a           < ,,  e -sw.         .-w -n a- - ~.-. . - -
y
  'y.
+.+.
  ,.                                                                                                    t
.a..
_ :,u
m>
  ..:  Notice of Violation-                         -
a e
2-l l
-sw.
.-w
-n a-
- ~.-.. - -
'y.
t
_ :,u Notice of Violation-2-
l l
failure of. Valve IA-65CV resulted in a. total leakage rate that exceeded 17.66'scah (623.57 scfh).-(01013).
failure of. Valve IA-65CV resulted in a. total leakage rate that exceeded 17.66'scah (623.57 scfh).-(01013).
: 2.     =10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"
2.
states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform c                              satisfactorily in service is identified and performed.in                   ,
=10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"
accordance with written test procedures which incorporate                 ;
states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in service is identified and performed.in c
the requirements and acceptance limits contained in                       ;
accordance with written test procedures which incorporate the requirements and acceptance limits contained in applicable design documents."
applicable design documents."
CNS Quality Assurance Program for Operation Policy Directive, Revision 10, Section 2.11, written to implement.
CNS Quality Assurance Program for Operation Policy Directive, Revision 10, Section 2.11, written to implement.                 '
the requirements of 10 CFR Part 50, Appendix B, Criterion XI, requires that each type of test program performed will be defined by written procedures and instructions, and it requires that acceptance tests will be developed for structures, systems, and components to demonstrate their capability to perform satisfactorily following repairs or modification.
the requirements of 10 CFR Part 50, Appendix B, Criterion XI, requires that each type of test program performed will be defined by written procedures and instructions, and it                   .
a.
requires that acceptance tests will be developed for structures, systems, and components to demonstrate their capability to perform satisfactorily following repairs or modification.
Contrary to the above, the licensee did'not assure that all testing was identified and perforised in accordance with written test procedures which incorporated the requirements and acceptable limits..
: a.       Contrary to the above, the licensee did'not assure that all testing was identified and perforised in accordance with written test procedures which incorporated the requirements and acceptable limits..
Specifically as of May 14, 1994, 68 components passing through 54 primary containment penetrations, each required to be local leak rate tested in accordance with the requirements of Technical Specification Surveillance Requirement 4.7.~A.2.f.1, " Leak Rate
Specifically as of May 14, 1994, 68 components passing through 54 primary containment penetrations, each required to be local leak rate tested in accordance with the requirements of Technical Specification                     ;
{
Surveillance Requirement 4.7.~A.2.f.1, " Leak Rate                   {
Testing," had not been identified in a procedure as requiring local leak rate testing,'as required by CNS Quality Assurance Program for Operation Policy Directive, Revision 10,.Section 2.11.
Testing," had not been identified in a procedure as                   !
These components had never been local leak rate tested.
requiring local leak rate testing,'as required by CNS Quality Assurance Program for Operation Policy Directive, Revision 10,.Section 2.11.       These components had never been local leak rate tested.
(01023) b.
(01023)
Contrary to the-above, the licensee did not assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits.
I
As of June 21, 1994, instrument pressure switches PC-PS-12A, B, C, and 0; PC-PS-101A, B, C,.and D; PC-PS-t 119A, B, C, and D; PC-PS-16; and PC-PT-512A and B, each required to be local leak rate tested in accordance with the requirements of Technical Specification Surveillance Requirement 4.7.A.2.f.1,
: b.     Contrary to the-above, the licensee did not assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits.             ;
" Leak Rate Testing," had not been identified in a procedure as requiring local leak rate testing after being isolated from the containment integrated leak
As of June 21, 1994, instrument pressure switches PC-
* PS-12A, B, C, and 0; PC-PS-101A, B, C,.and D; PC-PS-                 t 119A, B, C, and D; PC-PS-16; and PC-PT-512A and B,                   i each required to be local leak rate tested in accordance with the requirements of Technical Specification Surveillance Requirement 4.7.A.2.f.1,
                                      " Leak Rate Testing," had not been identified in a procedure as requiring local leak rate testing after being isolated from the containment integrated leak


u.
u.
r   ..
r Notice of-Violation
Notice of-Violation                               - 3.-
- 3.-
rate test, as required by CNS Quality Assurance Program for Operation Policy Directive, Revision 10,.
rate test, as required by CNS Quality Assurance Program for Operation Policy Directive, Revision 10,.
Section 2.11. These switches had never been local L                                                 leak rate tested. (01033)
Section 2.11.
: 3.               10 CFR Part 50, Appendix B, Criterion III, " Design Control,"
These switches had never been local L
states in part, that "[m]easures shall be established to assure that . . . the design basis . . . [is] correctly translated into specifications, drawings, procedures, and         .
leak rate tested. (01033) 3.
instructions. These measures shall include provisions to j
10 CFR Part 50, Appendix B, Criterion III, " Design Control,"
assure that appropriate quality standards are specified and       i included in design documents and that deviations from such       J standards are controlled."
states in part, that "[m]easures shall be established to assure that... the design basis... [is] correctly translated into specifications, drawings, procedures, and instructions. These measures shall include provisions to j
Draft General Design Criterion 53, a measure written to comply with the requirements of 10 CFR Part 50, Appendix B, Criterion III, as committed to in Appendix F of the Updated Safety Analysis Report (USAR), states that "[p]enetrations L                                         that require closure for the containment function shall be protected by redundant valving and associated apparatus."
assure that appropriate quality standards are specified and i
Draft General Design Criterion 1, as committed to in Appendix F of the USAR, states that "[t] hose' systems and components of reactor facilities which are essential to the prevention of accidents which could effect the and safety or mitigation of their consecuences shall publicbe health identified and then designed, fabricatec, and erected to quality standards that reflect the importance of the safety function to be performed."
included in design documents and that deviations from such J
standards are controlled."
Draft General Design Criterion 53, a measure written to comply with the requirements of 10 CFR Part 50, Appendix B, Criterion III, as committed to in Appendix F of the Updated Safety Analysis Report (USAR), states that "[p]enetrations L
that require closure for the containment function shall be protected by redundant valving and associated apparatus."
Draft General Design Criterion 1, as committed to in Appendix F of the USAR, states that "[t] hose' systems and components of reactor facilities which are essential to the prevention of accidents which could effect the and safety or mitigation of their consecuences public health shall be identified and then designed, fabricatec, and erected to quality standards that reflect the importance of the safety function to be performed."
General Electric Design Specification No. 22All53, " Codes and Industrial Standard," Revision 1, states, in Note 3 of the Appendix, that "[p]iping, which is an integral part of the primary containment for isolation purposes, shall have at least the same quality and levels of assurance as the primary containment."
General Electric Design Specification No. 22All53, " Codes and Industrial Standard," Revision 1, states, in Note 3 of the Appendix, that "[p]iping, which is an integral part of the primary containment for isolation purposes, shall have at least the same quality and levels of assurance as the primary containment."
i Contrary to Criterion III, the licensee did not assure that       I the above design bases were correctly translated into             I specifications and instructions'and did not assure that deviations from quality standards were controlled.
i Contrary to Criterion III, the licensee did not assure that I
Specifically:                                                     )
the above design bases were correctly translated into I
: a. As of May 14, 1994, numerous primary containment           li penetrations had no redundant valving. These               I penetrations included, but were not limited to, Penetrations X-21, X-22, X-25, X-29E, X-30E/F, X-           '
specifications and instructions'and did not assure that deviations from quality standards were controlled.
33E/F, X-209A/B/C/0, and X-218.                             ,
Specifically:
)
l a.
As of May 14, 1994, numerous primary containment i
penetrations had no redundant valving. These I
penetrations included, but were not limited to, Penetrations X-21, X-22, X-25, X-29E, X-30E/F, X-33E/F, X-209A/B/C/0, and X-218.
l l-b.
As of February 22, 1994, 10 penetrations consisting of manually operated vents, drains, and test connections i
l
l
: b. As of February 22, 1994, 10 penetrations consisting of l-manually operated vents, drains, and test connections i
~
l
_            - _ - - - - - -                                                                  ~


(
(
Notice of Violation                                                                                     p.
Notice of Violation p.
and requiring closure for the containment function, had a single manual-isolation valve for containment isolation as opposed to the required redundant valving and associated apparatus.                                                                       l t
and requiring closure for the containment function, had a single manual-isolation valve for containment isolation as opposed to the required redundant valving l
c.
and associated apparatus.
During an NRC inspection conducted June 13, 1994, through August 12, 1994, it was determined that approximately 300 containment penetrations had not                                               ,
t During an NRC inspection conducted June 13, 1994, c.
I been designed, fabricated, or installed to the same standards as the primary containment because these                                                 {
through August 12, 1994, it was determined that approximately 300 containment penetrations had not I
i components had not been correctly classified as essential. As a result, these penetrations had not been designed, fabricated, or erected to quality                                                   3 standards that reflect the importance of the safety                                                   )
been designed, fabricated, or installed to the same
function to be performed (e.g. some welds were not nondestructively tested, some p,enetrations were not local leak rate tested, and the penetrations were not treated as safety- related by the licensee's quality assurance program). (01043)
{
standards as the primary containment because these i
components had not been correctly classified as essential.
l As a result, these penetrations had not been designed, fabricated, or erected to quality 3
standards that reflect the importance of the safety
)
function to be performed (e.g.
some welds were not nondestructively tested, some p,enetrations were not local leak rate tested, and the penetrations were not treated as safety-related by the licensee's quality assurance program). (01043)
This is a Severity Level III problem (Supplement I).
This is a Severity Level III problem (Supplement I).
Civil Penalty - $100,000 B.     1.
Civil Penalty - $100,000 B.
1.
Technical Specification 3.9.A.I.c, " Auxiliary Electrical Equipment," requires, in part, that the reactor shall not be made critical from a Cold Shutdown Condition unless the 4160 volt critical buses IF and IG and the 480 volt critical buses IF and IG are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.
Technical Specification 3.9.A.I.c, " Auxiliary Electrical Equipment," requires, in part, that the reactor shall not be made critical from a Cold Shutdown Condition unless the 4160 volt critical buses IF and IG and the 480 volt critical buses IF and IG are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.
Technical Specification Surveillance Requirement 4.9.A.I.a,
Technical Specification Surveillance Requirement 4.9.A.I.a,
                              " Emergency Buses Undervoltage relays," states that "once every 18 months, loss of voltage on emergency buses is simulated to demonstrate the load shedding from emergency buses and the automatic start of diesel generators." USAR Section 2.2.7.2.1.a, " Standby A-C Power (Diesel Generators)
" Emergency Buses Undervoltage relays," states that "once every 18 months, loss of voltage on emergency buses is simulated to demonstrate the load shedding from emergency buses and the automatic start of diesel generators."
USAR Section 2.2.7.2.1.a, " Standby A-C Power (Diesel Generators)
Test Capability," defines the function of the protective scheme as providing for the clearing the buses of all motor loads excepting supply to the 480 volt critical unit substation.
Test Capability," defines the function of the protective scheme as providing for the clearing the buses of all motor loads excepting supply to the 480 volt critical unit substation.
Technical Specification 1.Y, " Surveillance Frequency,"
Technical Specification 1.Y, " Surveillance Frequency,"
states, in pari., that " performance of a Surveillance Requirement within the specified time interval shall constitute compliance with operability requirements for an                                                                 !
states, in pari., that " performance of a Surveillance Requirement within the specified time interval shall constitute compliance with operability requirements for an LCO [ limiting condition for operation] unless otherwise required by the specification."
LCO [ limiting condition for operation] unless otherwise required by the specification."                                                                                             '
Contrary to above, from January 18, 1974 until May 25, 1994, the reactor had been made critical without 4160 volt i
Contrary to above, from January 18, 1974 until May 25, 1994, the reactor had been made critical without 4160 volt i


e
e
      ~ Notice of Violation .                                                         ,
~ Notice of Violation.
i critical buses' IF and IG, and 480 volt critical buses IF and IG being operable in that the undervoltage relays associated -
* i critical buses' IF and IG, and 480 volt critical buses IF and IG being operable in that the undervoltage relays associated -
with several of the electrical loads supplied by these buses had never been tested to demonstrate their operability or, upon testing, failed to perform their intended function of     ,
with several of the electrical loads supplied by these buses had never been tested to demonstrate their operability or, upon testing, failed to perform their intended function of shedding their respective electrical loads from these buses.
shedding their respective electrical loads from these buses.
(02013) 2.
(02013)
10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"
: 2. 10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"
states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in service is identified and performed in accordance with written test procedures which incorporate the requirements and acceptable limits contained in applicable design documents."
states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in service is identified and performed in accordance with written test procedures which incorporate the requirements and acceptable limits contained in applicable design documents."
Contrary to the above, the licensee did not. assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits. Specifically:
Contrary to the above, the licensee did not. assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits.
: a. During an NRC inspection conducted May 23, 1994, through August 12, 1994, Procedure 6.3.4.3,
Specifically:
                                  " Sequential Loading of Emergency Diesel Generators,"
a.
During an NRC inspection conducted May 23, 1994, through August 12, 1994, Procedure 6.3.4.3,
" Sequential Loading of Emergency Diesel Generators,"
Revision 31, which is performed to satisfy Technical 4
Revision 31, which is performed to satisfy Technical 4
Specification Surveillance Requirement 4.9.A.I.a,       i
Specification Surveillance Requirement 4.9.A.I.a, i
                                  " Loss of Voltage Relays," was determined to be inadequate because it did not assure that the emergency diesel generators and critical buses would perform satisfactorily in service in that the           !
" Loss of Voltage Relays," was determined to be inadequate because it did not assure that the emergency diesel generators and critical buses would perform satisfactorily in service in that the procedure did not contain requirements to verify that i
procedure did not contain requirements to verify that     i the 480-volt supply breakers for safety-related and       ,
the 480-volt supply breakers for safety-related and nonsafety-related loads would shed from their electrical buses within a specified time, nor did the procedure identify that the control rod drive pump motors and station air compressors were required to be shed from the electrical bus.
nonsafety-related loads would shed from their             l electrical buses within a specified time, nor did the procedure identify that the control rod drive pump       ;
b.
motors and station air compressors were required to be   l shed from the electrical bus.
During an inspection conducted May 23, 1994, through-August 12, 1994, the NRC. identified that Procedure 6.3.20.1, "RHR Service Water Booster Pump Flow Test and Valve Operability Test," Revision 27, did not provide for the testing of the load shedding feature of the supply breakers associated with the 4160 volt residual heat removal service water booster pumps.
: b.     During an inspection conducted May 23, 1994, through-August 12, 1994, the NRC . identified that Procedure 6.3.20.1, "RHR Service Water Booster Pump Flow Test and Valve Operability Test," Revision 27, did not provide for the testing of the load shedding feature of the supply breakers associated with the 4160 volt residual heat removal service water booster pumps.
(02023)
(02023)
This is a Severity Level III problem (Supplement I).
This is a Severity Level III problem (Supplement I).
Civil Penalty - $100,000.
Civil Penalty - $100,000.


e .
e
    ,1
,1 3
    ;. -                                                                                              3
' Notice of Violation C.-
    >              ' Notice of Violation                                               C .-   1. Technical. Specification 3.12.A.1, " Control Room Emergency Filter System," states, in part, that ". . . the Control Room Emergency Filter system . . . shall be operable at all times when containment integrity is required."
1.
The Order Confirming Licensee C:mmitments on Post-TMI Related Issues, dated July 10, 1981, confirms NPPD's commitment to complete NUREG-0737, " Clarification of TMI Action P1an Requirements," Item III.D.3.4, " Control Room-Habitability."     Item III.D.3.4 involves the review of-facility design requirements against the Standard Review Plan. The NPPD response to Generic Letter 80-90, dated December 30, 1980, submitted the control room habitability evaluation, which stated, in part, "the CNS control room       .
Technical. Specification 3.12.A.1, " Control Room Emergency Filter System," states, in part, that "... the Control Room Emergency Filter system... shall be operable at all times when containment integrity is required."
ventilation system is designed to maintain the control room at about %-in. H2 O [0.031 kPa] positive pressure by.
The Order Confirming Licensee C:mmitments on Post-TMI Related Issues, dated July 10, 1981, confirms NPPD's commitment to complete NUREG-0737, " Clarification of TMI Action P1an Requirements," Item III.D.3.4, " Control Room-Habitability."
supplying air at a high enough pressure that even when system losses and the booster exhaust fan pressures are accounted for, the control room pressure is still               ,
Item III.D.3.4 involves the review of-facility design requirements against the Standard Review Plan. The NPPD response to Generic Letter 80-90, dated December 30, 1980, submitted the control room habitability evaluation, which stated, in part, "the CNS control room ventilation system is designed to maintain the control room at about %-in. H O [0.031 kPa] positive pressure by.
positive. . . "
2 supplying air at a high enough pressure that even when system losses and the booster exhaust fan pressures are accounted for, the control room pressure is still positive... "
A Safety Evaluation Report for the Cooper Station from the Accident Evaluation Branch on NUREG-0737, Item No.
A Safety Evaluation Report for the Cooper Station from the Accident Evaluation Branch on NUREG-0737, Item No.
III.D.3.4, ~ " Control Room Habitability," dated February 24, 1982, states, in part, that ". . . the design meets the criteria identified in Item III.D.3.4 of NUREG-0737 and is acceptable."
III.D.3.4, ~ " Control Room Habitability," dated February 24, 1982, states, in part, that "... the design meets the criteria identified in Item III.D.3.4 of NUREG-0737 and is acceptable."
Contrary to the above, from June 1989 until April 28, 1994, the Control Room Emergency Filter system was not operable at all times when containment integrity was required in that testing failed to' demonstrate that a positive pressure could be maintained in the control room during the periodic performance of the control room envelope pressurization         ,
Contrary to the above, from June 1989 until April 28, 1994, the Control Room Emergency Filter system was not operable at all times when containment integrity was required in that testing failed to' demonstrate that a positive pressure could be maintained in the control room during the periodic performance of the control room envelope pressurization test. (03013) 2.
test. (03013)
10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"
: 2. 10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"
states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in' service is identified and performed in accordance with written test procedures which incorporate the requirements and acceptance limits contained in j
states, in part, that "[a] test program shall be established   ,
applicable design documents."
to assure that all testing required to demonstrate that         !
CNS Quality Assurance Program for Operation Policy Directive, Revision 10, Section 2.11, written to implement the requirements of 10 CFR Part 50, Appendix B, Criterion XI, requires that each type of test program performed will be defined by written procedures and instructions, and it j
structures, systems, and components will perform satisfactorily in' service is identified and performed in       ;
requires that acceptance tests will be developed for j
accordance with written test procedures which incorporate       .
the requirements and acceptance limits contained in             j applicable design documents."
CNS Quality Assurance Program for Operation Policy Directive, Revision 10, Section 2.11, written to implement the requirements of 10 CFR Part 50, Appendix B, Criterion XI, requires that each type of test program performed will       ,
be defined by written procedures and instructions, and it     j requires that acceptance tests will be developed for             j


                                                                                                                    ']
']
i                                                                                                           )
i
7               Notice of Violation                                                                         ')
)
')
7 Notice of Violation '!
l I
l I
l                                                       structures, systems, and components to demonstrate their capability to perform satisfactorily following repairs or.
l structures, systems, and components to demonstrate their capability to perform satisfactorily following repairs or.
modification.                                                 {
{
modification.
{
{
Contrary to the above, the licensee did not assure that all' testing was identified and performed in accordance with       ]
Contrary to the above, the licensee did not assure that all'
written test procedures which incorporated the requirements L
]
testing was identified and performed in accordance with written test procedures which incorporated the requirements L
and acceptance limits in applicable design documents.
and acceptance limits in applicable design documents.
'                                                      Specifically, from June 1989 until June 1994, Surveillance-l                                                      Procedure 6.3.17.18, " Control Room Envelope Pressurization Test," Revision 4,.was not sufficiently detailed in.that it     ,
Specifically, from June 1989 until June 1994, Surveillance-Procedure 6.3.17.18, " Control Room Envelope Pressurization l
did not incorporate acceptance limits to assure that the       l i
Test," Revision 4,.was not sufficiently detailed in.that it i
did not incorporate acceptance limits to assure that the l
Control Room Emergency Filter system would perform satisfactorily in service and because the procedure did not prohibit the inappropriate manipulation of pressures in the adjoining buildings as a precondition for conducting the test. (03023)
Control Room Emergency Filter system would perform satisfactorily in service and because the procedure did not prohibit the inappropriate manipulation of pressures in the adjoining buildings as a precondition for conducting the test. (03023)
This is a Severity Level III problem (Supplement I).
This is a Severity Level III problem (Supplement I).
Civil Penalty - $100,000.
Civil Penalty - $100,000.
II. Violations Not Assessed A Civil Penalty A.       10 CFR Part 50, Appendix B, Criterion V, " Instructions, Procedures                 {
II.
Violations Not Assessed A Civil Penalty A.
10 CFR Part 50, Appendix B, Criterion V, " Instructions, Procedures
{
and Drawings," states,-in part, that "[a]ctivities affecting quality shall be prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances and shall be accomplished in accordance-with these instructions, procedures, or drawings."
and Drawings," states,-in part, that "[a]ctivities affecting quality shall be prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances and shall be accomplished in accordance-with these instructions, procedures, or drawings."
Engineering Procedure 3.8, " Drawing Control Procedure,"
Engineering Procedure 3.8, " Drawing Control Procedure,"
Revision.7, written, in part, to implement 10 CFR Part 50, Appendix B, Criterion V, requires that safety-related drawings be included on the safety-related drawing list.
Revision.7, written, in part, to implement 10 CFR Part 50, Appendix B, Criterion V, requires that safety-related drawings be included on the safety-related drawing list.
: 1.                   Contrary to the above, during an NRC inspection conducted June 13, 1994, through August 12, 1994, it was determined that safety-related Flow Diagram No. 2028, " Reactor Building and Drywell Equipment Drain System," Revision N27, was not included on the safety-related drawing list. As a result of this determination, the licensee subsequtntly identified 13 other drawings containing safety-related components that were not included on the safety-related drawing list.
1.
Contrary to the above, during an NRC inspection conducted June 13, 1994, through August 12, 1994, it was determined that safety-related Flow Diagram No. 2028, " Reactor Building and Drywell Equipment Drain System," Revision N27, was not included on the safety-related drawing list. As a result of this determination, the licensee subsequtntly identified 13 other drawings containing safety-related components that were not included on the safety-related drawing list.
(04014)
(04014)
This is Severity Level IV violation (Supplement I).
This is Severity Level IV violation (Supplement I).
: 2.                 Contrary to the above, during an NRC inspection conducted May-23, 1994, through August 12, 1994, Maintenance Procedure 7.3.2.1, "DB-25 and DB-50 Circuit Breakers - Setting, Testing, and Maintenance (With Amptectors)," Revision 3, was
2.
Contrary to the above, during an NRC inspection conducted May-23, 1994, through August 12, 1994, Maintenance Procedure 7.3.2.1, "DB-25 and DB-50 Circuit Breakers - Setting, Testing, and Maintenance (With Amptectors)," Revision 3, was


                                                                  . .~           . . . . . .  ..    -
..~
i                                                                                                   -
i Notice of Violation- '
    #*        Notice of Violation-                                                                                                         '
]
                                                                                                            ]
q' t
q'                                             _
determined-to be inappropriate to the circumstances in that the procedure did not contain~a requirement to remove tie-wraps from the subject circuit breakers following preventive maintenance, nor did the procedure provide for comprehensive postmaintenance testing of all circuit breaker functions following the completion of preventive maintenance. (05014)
t                                        determined-to be inappropriate to the circumstances in that the procedure did not contain~a requirement to remove tie-wraps from the subject circuit breakers following preventive maintenance, nor did the procedure provide for comprehensive postmaintenance testing of all circuit breaker functions following the completion of preventive maintenance. (05014)
This is a Severity Level IV. violation (Supplement I).
This is a Severity Level IV. violation (Supplement I).                       '
Pursuant to the provisions of 10 CFR 2.201, Nebraska' Public Power District (Licensee) is hereby required to submit a written statement or explanation to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, 1
Pursuant to the provisions of 10 CFR 2.201, Nebraska' Public Power District (Licensee) is hereby required to submit a written statement or explanation to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, 1
within 30 days of the date of this Notice of Violation and Proposed Imposition-             '
within 30 days of the date of this Notice of Violation and Proposed Imposition-of Civil Penalties (Notice). This reply should be clearly marked as a " Reply i
of Civil Penalties (Notice). This reply should be clearly marked as a " Reply               i to a Notice of Violation" and should include for each alleged violation:- (1)               i admission or denial of the alleged violation, (2) the reasons for the                       t violation if admitted, and if denied, the reasons why, (3) the corrective steps that have been taken and the results achieved, (4) the corrective steps               i that will be taken to avoid further violations, ~ and (5) the date when full                 l compliance will be achieved. If an adequate reply is not received within the                 '
to a Notice of Violation" and should include for each alleged violation:- (1) i admission or denial of the alleged violation, (2) the reasons for the t
l              time specified in this Notice, an order or a Demand for Information may be issued as to why the license should not be modified, suspended, or revoked or why such other action as may be proper should not be taken. Consideration may be given to extending the response time for good cause shown. Under the                     '
violation if admitted, and if denied, the reasons why, (3) the corrective steps that have been taken and the results achieved, (4) the corrective steps i
authority of Section 182 of the Act, 42 U.S.C. 2232, this response shall-be submitted under oath or affirmation.
that will be taken to avoid further violations, ~ and (5) the date when full compliance will be achieved.
i r              Within the same time as provided for the response required above under 10 CFR               i 2.201, the Licensee may pay the civil penalties by letter addressed to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, with a                 >
If an adequate reply is not received within the l
check, draft, money order, or electronic' transfer payable to the Treasurer of               i the United States in the amount of the civil penalties proposed above, or may.              .
time specified in this Notice, an order or a Demand for Information may be issued as to why the license should not be modified, suspended, or revoked or why such other action as may be proper should not be taken. Consideration may be given to extending the response time for good cause shown. Under the authority of Section 182 of the Act, 42 U.S.C. 2232, this response shall-be submitted under oath or affirmation.
protest imposition of the civil penalties in whole or in part, by a written                 l answer addressed to the Director, Office of Enforcement, U.S. Nuclear                       .
i Within the same time as provided for the response required above under 10 CFR i
Regulatory Commission. Should the Licensee fail to answer within the time                   ,
r 2.201, the Licensee may pay the civil penalties by letter addressed to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, with a check, draft, money order, or electronic' transfer payable to the Treasurer of i
specified, an order imposing the civil penalties will be issued. Should the i
the United States in the amount of the civil penalties proposed above, or may.
Licensee elect to file an answer in accordance with 10 CFR 2.205 protesting the civil penalties, in whole or in part, such answer should be clearly marked-as an " Answer to a Notice of Violation" and may: (1) deny the violation (s) listed in this Notice, in whole or in part, (2) demonstrate extenuating circumstances, (3) show error in this Notice, or (4) show other reasons why                 i the penalties should not be imposed. In addition to protesting the civil                     !
protest imposition of the civil penalties in whole or in part, by a written l
penalties in whole or in part, such answer may request remission'or mitigation               ,
answer addressed to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission.
of the penalties.
Should the Licensee fail to answer within the time specified, an order imposing the civil penalties will be issued. Should the i
In requesting mitigation of the proposed penalties, the factors addressed in Section VI.B.2 of 10 CFR Part 2. Appendix C, should be addressed. Any written answer,in accordance with 10 CFR 2.205 should be set forth separately from the               i
Licensee elect to file an answer in accordance with 10 CFR 2.205 protesting the civil penalties, in whole or in part, such answer should be clearly marked-as an " Answer to a Notice of Violation" and may:
  .;          statement or explanation in reply pursuant to 10 CFR 2.201, but may incorporate parts of the 10 CFR 2.201 reply by specific reference (e.g.,
(1) deny the violation (s) listed in this Notice, in whole or in part, (2) demonstrate extenuating circumstances, (3) show error in this Notice, or (4) show other reasons why i
the penalties should not be imposed.
In addition to protesting the civil penalties in whole or in part, such answer may request remission'or mitigation of the penalties.
In requesting mitigation of the proposed penalties, the factors addressed in Section VI.B.2 of 10 CFR Part 2. Appendix C, should be addressed. Any written answer,in accordance with 10 CFR 2.205 should be set forth separately from the i
statement or explanation in reply pursuant to 10 CFR 2.201, but may incorporate parts of the 10 CFR 2.201 reply by specific reference (e.g.,
citing page and paragraph numbers) to avoid repetition. The attention of the 6
citing page and paragraph numbers) to avoid repetition. The attention of the 6


1 1
1 1
Notice of Violation                                                       '
Notice of Violation '
Licensee is directed to the other provisions of 10 CFR 2.205, regarding the procedure for imposing civil penalties.
Licensee is directed to the other provisions of 10 CFR 2.205, regarding the procedure for imposing civil penalties.
1 Upon failure to pay any civil penalties due which subsequently have been determined in accordance with the applicable provisions of 10 CFR 2.205, this matter may be referred to the Attorney General, and the penalty, unless compromised, remitted, or-mitigated, may be collected by civil action pursuant to Section 234(c) of the Act, 42 U.S.C. 2282c.
Upon failure to pay any civil penalties due which subsequently have been determined in accordance with the applicable provisions of 10 CFR 2.205, this matter may be referred to the Attorney General, and the penalty, unless compromised, remitted, or-mitigated, may be collected by civil action pursuant to Section 234(c) of the Act, 42 U.S.C. 2282c.
The response noted above (Reply to Notice of Violation, letter with payment of civil penalties, and Answer to a Notice of Violation) should be addressed to:
The response noted above (Reply to Notice of Violation, letter with payment of civil penalties, and Answer to a Notice of Violation) should be addressed to:
Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, ATTN:
Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, ATTN:
Document Control Desk, Washington, D.C. 20555 with a copy to the Regional Administrator, U.S. Nuclear Regulatory Commission, Region IV, 611 Ryan Plaza Drive, Suite 400, Arlington, Texas, 76011 and a copy to the NRC Resident Inspector at the facility that is the subject of this Notice.
Document Control Desk, Washington, D.C. 20555 with a copy to the Regional Administrator, U.S. Nuclear Regulatory Commission, Region IV, 611 Ryan Plaza Drive, Suite 400, Arlington, Texas, 76011 and a copy to the NRC Resident Inspector at the facility that is the subject of this Notice.
Dated a Rockville, Maryland this (   ' day of December,1994.
Dated a Rockville, Maryland this (
' day of December,1994.


{     s
{
    ..                                                                                        o
s o
    ^     Enclosure '2 - Description of. the~ Severity Level III Problems A. Primary Containment Svstem Problem (I. A) 1 from NRC's perspective, the three, violations associated with the primary         l
^
              - containment system problem were important from a safety and regulatory           i significance standpoint because NPPD's surveillance testing and system         2 design control programs for the primary containment system possessed             I neither the rigor nor the technical; depth to be able to maintain the.       1 original design or adequately test the operability of the system. As a result,.NPPD was unable to' reliably determine system operability,'and the consequence of_this failure was that the containment system was             ,
Enclosure '2 - Description of. the~ Severity Level III Problems A.
inoperable fros'the original licensing in 1974, until the problem was <         ,
Primary Containment Svstem Problem (I. A) 1 from NRC's perspective, the three, violations associated with the primary
- containment system problem were important from a safety and regulatory i
significance standpoint because NPPD's surveillance testing and system 2
design control programs for the primary containment system possessed neither the rigor nor the technical; depth to be able to maintain the.
1 original design or adequately test the operability of the system. As a result,.NPPD was unable to' reliably determine system operability,'and the consequence of_this failure was that the containment system was inoperable fros'the original licensing in 1974, until the problem was <
identified by NRC and NPPD personnel in May 1994. These longstanding problems.with the design and testing of the primary containment system were permitted to exist for an extended period of time and the failure.
identified by NRC and NPPD personnel in May 1994. These longstanding problems.with the design and testing of the primary containment system were permitted to exist for an extended period of time and the failure.
of NPPD management and staff to identify and correct these problems resulted in the continuing degradation of this safety-related system.
of NPPD management and staff to identify and correct these problems resulted in the continuing degradation of this safety-related system.
The failure to maintain primary containment integrity (Violation I.A.1).
The failure to maintain primary containment integrity (Violation I.A.1).
is considered safety significant because, despite NPPD being able to demonstrate by analysis, performed after the violation was identified,           ,
is considered safety significant because, despite NPPD being able to demonstrate by analysis, performed after the violation was identified, that although the primary containment system was able to perform its intended safety function, the leakage rate associated only with isolation valve IA-65CV greatly exceeded the combined maximum permissible leakage rate for all primary containment penetrations.
that although the primary containment system was able to perform its             ,
In arriving at its conclusion that the primary containment system was capable of performing 'its intended safety function, NPPD assumed a failure mode of the nonsafety-related instrument air system such that-
intended safety function, the leakage rate associated only with isolation valve IA-65CV greatly exceeded the combined maximum                 ..'
-i all.the post-accident primary containment bypass leakage would still-be filtered, resulting in control room and off-site dose rates that did not exceed regulatory requirements.
permissible leakage rate for all primary containment penetrations. In           '
Since NPPD did not assume an unfiltered i
arriving at its conclusion that the primary containment system was capable of performing 'its intended safety function, NPPD assumed a           .;
release relative to this analysis, the potential for excessive control room and off-site dose rates was not calculated and evaluated for significance.
failure mode of the nonsafety-related instrument air system such that-       -i all .the post-accident primary containment bypass leakage would still- be filtered, resulting in control room and off-site dose rates that did not exceed regulatory requirements. Since NPPD did not assume an unfiltered     i release relative to this analysis, the potential for excessive control           ,
Violation I.A.2 is discussed in Section 0 of this enclosure.
room and off-site dose rates was not calculated and evaluated for significance.
I Violation I.A.3 associated with the primary containment system problem consists of a systematic failure in the design control of the containment system and is considered equally safety-significant. NRC recognizes that the primary containment penetration design deficiencies y
Violation I.A.2 is discussed in Section 0 of this enclosure.                     ,
occurred during the. construction of the plant, and NRC also recognizes that these deficiencies were identified as a result of implementing corrective actions for violations identified by NRC in 1993. However, the' corrective actions that resulted in the identification of these s
Violation I.A.3 associated with the primary containment system problem         I
deficiencies were not implemented in response to previous escalated enforcement action taken in EA 93-137. Additionally, NRC believes that the primary containment penetration design deficiencies should have been identified by routine efforts much sooner. Therefore, discretion or j
;              consists of a systematic failure in the design control of the containment system and is considered equally safety-significant. NRC recognizes that the primary containment penetration design deficiencies       y occurred during the. construction of the plant, and NRC also recognizes that these deficiencies were identified as a result of implementing             ;
mitigation for this violation as discussed in Sections VII.B.4 and 5 of the Enforcement Policy is not appropriate.
corrective actions for violations identified by NRC in 1993. However, the' corrective actions that resulted in the identification of these             s deficiencies were not implemented in response to previous escalated enforcement action taken in EA 93-137. Additionally, NRC believes that           -
the primary containment penetration design deficiencies should have been
.              identified by routine efforts much sooner. Therefore, discretion or j             mitigation for this violation as discussed in Sections VII.B.4 and 5 of
;              the Enforcement Policy is not appropriate.
1
1
                                                                                                ?
?
. ~


lJe m                                                                                               ,
lJe m
:6                                                                                                                         ;
:6
                                                                                  'B.
'B.
                        ' Critical Buses Problem"(I.8) .                                                                     I The'inoperability.of the 480 voit and 4160 volt critical buses (Violation I.B.1) is also considered significant from a. safety and regulatory standpoint. At the September 16 enforcement conference, NPPD                            +
' Critical Buses Problem"(I.8).
presented the.results of an evaluation of emergency; diesel generator-
I The'inoperability.of the 480 voit and 4160 volt critical buses (Violation I.B.1) is also considered significant from a. safety and regulatory standpoint. At the September 16 enforcement conference, NPP
          ,              loading, which assumed that shedding'of non-essential loads would not .
+
occur.                                                                                              ,
presented the.results of an evaluation of emergency; diesel generator-loading, which assumed that shedding'of non-essential loads would not.
                                      . On the basis of this evaluation, NPPD concluded that the emergency.
. On the basis of this evaluation, NPPD concluded that the occur.
intended safety      diesel. generators would still be capable of performing their.
emergency. diesel. generators would still be capable of performing their.
function.                                                               J The NRC   review of this evaluation ongoing;-however, . based on' a preliminary review, NRC has no basis for       is  still-disputing the conclusions reached by NPPD with regard to emergency diesel generator operability, even though the NRC did identify several-weaknesses'in the NPPD evaluation.
intended safety function.
Although the emergency diesel generators appear to have remained functional during the period the undervoltage relays-associated with             .
The NRC review of this evaluation is still-J ongoing;-however,. based on' a preliminary review, NRC has no basis for disputing the conclusions reached by NPPD with regard to emergency diesel generator operability, even though the NRC did identify several-weaknesses'in the NPPD evaluation.
certain electrical loads were not tested or were not operable, NRC has                               ;
Although the emergency diesel generators appear to have remained functional during the period the undervoltage relays-associated with certain electrical loads were not tested or were not operable, NRC has which are supplied with electrical power by the emerg generators under certain accident conditions, were inoperable.
which are supplied with electrical power by the emerg                                                 '
conclusion was based on the undervoltage relays associated with some of This NRC's determination that undervoltage relays were on the relays: 'l) having never been tested (e.g.,' station air compressors IA and 18 which are. supplied by 480 volt critical buses IF and IG); 2 control cen)ters N,.V, MR, and OG-1 which are also su critical buses IF and 1G); and 3) failing to function as the result of e
generators under certain accident conditions, were inoperable. This conclusion was based on the undervoltage relays associated with some of NRC's on    the relays:    determination that undervoltage relays were                                       :
configuration changes pumps 1A-D which are su(pplied by 4160 volt critical ' bu Consequently, NRC has recharacterized the~ apparent violation of TS 3.9.A.I.b (298/9416-03) as a violation of TS 3.9.A.1.c.
                                                'l) having never been tested (e.g.,' station air compressors and        IG); 2      IA and 18 which are. supplied by 480 volt critical buses IF control cen)ters N,.V, MR, and OG-1 which are also su critical buses configuration          IF and 1G); and 3) failing to function as the result of changes e
TS 3.9. A.I.c requires that the reactor not be made critical from a Cold Shutdown Condition unless the 4160 volt critical buses IF and IG and th critical buses IF and IG are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.
pumps 1A-D which are su(pplied by 4160 volt critical ' bu                                             .
Violation I.B.2 is discussed in Section D of this enclosure.
Consequently, NRC has recharacterized the~ apparent violation of TS 3.9.A.I.b (298/9416-03) as a violation of TS 3.9.A.1.c.
TS 3.9. A.I .c                   -
requires that the reactor not be made critical from a Cold Shutdown Condition critical     busesunlessIF and IGthe are4160    volt and energized,  critical   buses IF and the undervoltage                 IG and and loss of th voltage relays, as well as their auxiliary relays, are operable.
Violation I.B.2 is discussed in Section D of this enclosure.                                             ,
C.
C.
Control Room Emeroency Filter System Problem (I.C)                                                     I The circumstances involving the control room emergency filter system violationsconsisted problem             of the plant both TSof inadequacy of the test control program and concern with the maintenance (Problem I.C.1), and illustrate a serious NRC and testing practices at CNS. NRC and maintenance of the secondary containment. identified ina The corrective actions inoperable control room emer,gency                                 filter system.for. those The continuing practice of inappropriate preconditioning of structures, systems, and components to obtain satisfactory test results, as evidenced by the I
Control Room Emeroency Filter System Problem (I.C)
_    _    . .        . . .                      -            _                        ,--.-            --          A
I The circumstances involving the control room emergency filter system problem consisted both of inadequacy of the test control program and violations of the plant TS concern with the maintenance (Problem I.C.1), and illustrate a serious NRC and testing practices at CNS. NRC and maintenance of the secondary containment. identified ina The corrective actions inoperable control room emer,gency filter system.for. those The continuing practice of inappropriate preconditioning of structures, systems, and components to obtain satisfactory test results, as evidenced by the A


s
s
  .g
.g
:..                                                                   manipulation of the pressures in the adjoining buildings to obtain the required pressure in the control room during the control room envelope pressurization test, has masked hardware deficiencies which have caused or contributed to this inoperable safety system.
:.. manipulation of the pressures in the adjoining buildings to obtain the required pressure in the control room during the control room envelope pressurization test, has masked hardware deficiencies which have caused or contributed to this inoperable safety system.
Violation I.C.2 is discussed in the following section of this enclosure.
Violation I.C.2 is discussed in the following section of this enclosure.
D. Testina Safetv-Related Systems Violations In NRC's view, the violations associated with NPP0's failure to adequately test safety-related systems (Violations I.A.2 I.B.2, and I.C.2), a failure common to all three problems, represent deep-seated issues, indicative of a collapse in the test control program at CNS.
D.
Test control program failures. include: ina structures, systems, and components; longstanding ppropriate preconditioning of surveillance procedure deficiencies that the CNS staff either did not recognize or had accepted, and resulted in a failure to demonstrate system operability; components that were required to be tested by the plant TS or NRC regulations but were never tested; cad a failure by NPPD                         '
Testina Safetv-Related Systems Violations In NRC's view, the violations associated with NPP0's failure to adequately test safety-related systems (Violations I.A.2 I.B.2, and I.C.2), a failure common to all three problems, represent deep-seated issues, indicative of a collapse in the test control program at CNS.
management to ensure that corrective actions for past similar surveillance-related problems were adequate to prevent recurrence. As a result, NRC is citing test control program violations as a part of each of the three identified problems, i
Test control program failures. include:
ina structures, systems, and components; long ppropriate preconditioning of standing surveillance procedure deficiencies that the CNS staff either did not recognize or had accepted, and resulted in a failure to demonstrate system operability; components that were required to be tested by the plant TS or NRC regulations but were never tested; cad a failure by NPPD management to ensure that corrective actions for past similar surveillance-related problems were adequate to prevent recurrence.
As a result, NRC is citing test control program violations as a part of each of the three identified problems, i
l i
l i
                                                                                                            ]
]
u
u


            ~
~
  - c. . .
- c...
Nebraska Public Power District DISTRIBUTION:
Nebraska Public Power District DISTRIBUTION:
SECY CA
SECY CA
              'JTaylor, EDO JMilhoan, DEDR JLieberman, OE MSatorius, OE LJCallan, RIV WRussell, NRR RZimmerman, NRR LChandler, OGC JGoldberg, OGC Enforcement Coordinators RI, RII, RIII, RIV FIngram, OPA LTremper, OC DWilliams, OIG EJordan, AE00                   -
'JTaylor, EDO JMilhoan, DEDR JLieberman, OE MSatorius, OE LJCallan, RIV WRussell, NRR RZimmerman, NRR LChandler, OGC JGoldberg, OGC Enforcement Coordinators RI, RII, RIII, RIV FIngram, OPA LTremper, OC DWilliams, OIG EJordan, AE00 JFitzGerald, 01
JFitzGerald, 01
-EA File (2)
              -EA File (2)
NUDOCS RIV DISTRIBUTION:
NUDOCS                             I RIV DISTRIBUTION:
LJCr.llan JMontgomery ABBeach*JDyer TPGwynn>TWesterman SJCollins*RScarano PHarrell*TReis RKopriva, SRI, CNS JGilliland CHackney WBrown GSanborn*EAFile RWise
LJCr.llan JMontgomery ABBeach*JDyer TPGwynn>TWesterman SJCollins*RScarano PHarrell*TReis RKopriva, SRI, CNS JGilliland CHackney WBrown GSanborn*EAFile RWise
              'LWilliamson                       i RIV Files MIS Coordinator                   l l
'LWilliamson i
l l
RIV Files MIS Coordinator 1
1


                              'f;
'f; UNITES $TATES
    ,j ;-                                                    UNITES $TATES 9
[ [gCE4 $g NUCLEAR REGULATORY COMMISSION
[ [gCE4 $g                                 NUCLEAR REGULATORY COMMISSION j
,j ;-
jy       y                                                 RE2CN IV o~              !                    611 RY AN PLAZA DRIVE.SulTE 40c
9 jy y
[                       AR LINGTON, TE XAS 76011 8064 SEP 261994 Docket:         50-298 License: DPR-46 Nebraska Public Power District ATTN: Guy R. Horn, Vice President - Nuclear P.O. Box 499 Columbus, Nebraska 68602-0499
j RE2CN IV 611 RY AN PLAZA DRIVE.SulTE 40c o~
[
AR LINGTON, TE XAS 76011 8064 SEP 261994 Docket:
50-298 License: DPR-46 Nebraska Public Power District ATTN: Guy R. Horn, Vice President - Nuclear P.O. Box 499 Columbus, Nebraska 68602-0499


==SUBJECT:==
==SUBJECT:==
ENFORCEMENT CONFERENCE This refers to the enforcement conference, conducted on September 16, 1994, at the Region IV office in Arlington, Texas, concerning activities authorized by NRC License DRP-46 for the Cooper Nuclear Station. The meeting was attended by those on the attached Attendance List, The subjects discussed at this meeting are described in the enclosed Meeting Summary.
ENFORCEMENT CONFERENCE This refers to the enforcement conference, conducted on September 16, 1994, at the Region IV office in Arlington, Texas, concerning activities authorized by NRC License DRP-46 for the Cooper Nuclear Station.
It is our opinion that this meeting was beneficial and has provided a better understanding of the apparent violations identified in NRC Inspection Reports 50-298/94-14, 16, and 19 and your corrective actions. Your staff's professionalism and candor during the meeting was greatly appreciated.
The meeting was attended by those on the attached Attendance List, The subjects discussed at this meeting are described in the enclosed Meeting Summary.
It is our opinion that this meeting was beneficial and has provided a better understanding of the apparent violations identified in NRC Inspection 50-298/94-14, 16, and 19 and your corrective actions.
Your Reports staff's professionalism and candor during the meeting was greatly appreciated.
Any enforcement actions taken as a result of the meeting will be addressed in separate correspondence.
Any enforcement actions taken as a result of the meeting will be addressed in separate correspondence.
In accordance with Section 2.790 of the NRC's " Rules of Practice," Part 2, Title 10, Code of Federal Regulations, a copy of this letter will be placed in the NRC's Public Document Room.
In accordance with Section 2.790 of the NRC's " Rules of Practice," Part 2, Title 10, Code of Federal Regulations, a copy of this letter will be placed in the NRC's Public Document Room.
Should you have any questions concerning this matter, we will be pleased to discuss them with you.
Should you have any questions concerning this matter, we will be pleased to discuss them with you.
Sincerel ,
Sincerel,
L)
L)
I.BillBeach, Director Division of Reactor Projects !
I.BillBeach, Director Division of Reactor Projects Attachments:
Attachments:                                                                     ,
1.
: 1.       Attendance List
Attendance List 2.
: 2.       Licensee Presentation cc:
Licensee Presentation cc:
Nebraska Public Power District                                                 !
Nebraska Public Power District ATTN:
ATTN:       G. D. Watson, General Counsel P.O. Box 499 Columbus, Nebraska 68602-0499
G. D. Watson, General Counsel P.O. Box 499 Columbus, Nebraska 68602-0499
          ~i.,e   .o     _. o n
~i.,e
.o
_. o n


[ ' -Nebraska Public Power District               Nebraska Public Power District
[ '
    !ATIN: John Mueller, Site Manager-P.O. Box 98
-Nebraska Public Power District Nebraska Public Power District
    .Brownville, Nebraska' 68321 Midwest Power ATTN:   James C. Parker, Sr. Engineer 907 Walnut-Street-P.O. Box 657 Des Moines, Iowa 50303 Lincoln Electric System ATIN:   Mr. Ron Stoddard lith and 0 Streets Lincoln, Nebraska 68508 Nebraska Department of Environmental Quality ATTN: .Randolph Wood, Director P.O. Box 98922 Lincoln, Nebraska 68509-8922 Nemaha County Board of Commissioners ATTN: Larry Bohlken, Chairman Nemaha County Courthouse l
!ATIN: John Mueller, Site Manager-P.O. Box 98
1824 N Street                                               '
.Brownville, Nebraska' 68321 Midwest Power ATTN:
Auburn, Nebraska 68305 Nebraska Department of Health ATTN: Harold Borchert, Director                             ;
James C. Parker, Sr. Engineer 907 Walnut-Street-P.O. Box 657 Des Moines, Iowa 50303 Lincoln Electric System ATIN:
Division of Radiological Health 301 Centennial Mall, South P.O. Box 95007 Lincoln, Nebraska 68509-5007 Department of Natural Resources ATTN: R. A. Kucera, Department Director of Intergovernmental Cooperation P.O. Box 176 Jefferson City, Missouri   65102 Kansas Radiation Control Program Director
Mr. Ron Stoddard lith and 0 Streets Lincoln, Nebraska 68508 Nebraska Department of Environmental Quality ATTN:.Randolph Wood, Director P.O. Box 98922 Lincoln, Nebraska 68509-8922 Nemaha County Board of Commissioners ATTN: Larry Bohlken, Chairman Nemaha County Courthouse 1824 N Street Auburn, Nebraska 68305 Nebraska Department of Health ATTN: Harold Borchert, Director Division of Radiological Health 301 Centennial Mall, South P.O. Box 95007 Lincoln, Nebraska 68509-5007 Department of Natural Resources ATTN:
R. A. Kucera, Department Director of Intergovernmental Cooperation P.O. Box 176 Jefferson City, Missouri 65102 Kansas Radiation Control Program Director


c   ..
c
:.s Nebraska Public Power, District                                         .;
:.s Nebraska Public Power, District g bcc to DMB (IE45) bec distrib. by RIV:
g bcc to DMB (IE45) bec distrib. by RIV:                                                   .
L. J. Callan Resident Inspector Brai.ch Chief (DRP/C)
L. J. Callan                         Resident Inspector Brai.ch Chief (DRP/C)               Leah Tremper, OC/LFDCB, MS: MNBB 4503 Mid System                           ORSS-FIP8 Branch Chief (DRP/TSS)               Project Engineer (DRP/C)
Leah Tremper, OC/LFDCB, MS: MNBB 4503 Mid System ORSS-FIP8 Branch Chief (DRP/TSS)
        .RIV File                             Senior Resident Inspector - River Bend Senior Resident Inspector - Fort Calhoun K. Perkins, 0:WCF0                   J. Gilliland, PA0 C. Hackney, RSLO i
Project Engineer (DRP/C)
RIV:0R           C:DRP/q       DhRP     .
.RIV File Senior Resident Inspector - River Bend Senior Resident Inspector - Fort Calhoun K. Perkins, 0:WCF0 J. Gilliland, PA0 C. Hackney, RSLO i
RCSte b f       P)#dh         dBN 9/fd94           9MI           9 & /94 N     ,
RIV:0R C:DRP/q DhRP RCSte b f P)#dh dBN 9/fd94 9MI 9 & /94 N


ATTACHMENT A
ATTACHMENT A
{,o :
{,o :
MEETING:          E.NFoF4EMERT bfEREccE. 0/ NPP)
E.NFoF4EMERT bfEREccE. 0/ NPP)
MEETING:
Aveoze,ar heur< os ax1*c.xms, coer e


==SUBJECT:==
==SUBJECT:==
Aveoze,ar heur< os ax1*c.xms, coere                        '
Roota Emet.dpe.
Roota Emet.dpe.
* E26s DATE:          6g6MPEfL b \tF)L                                                         ,
* E26s 6g6MPEfL b \\tF)L DATE:
PNDAMCEJ_!cT (PLEASE PRINT CLE LY)
PNDAMCEJ_!cT (PLEASE PRINT CLE LY) bRGANIZATION POSITION TITLE NAME 3
NAME                      bRGANIZATION           POSITION TITLE 3
.NARRblL-N R.L-Ca,er. Baaxa c. bee M StaW
              .NARRblL-                         N R.L-             Ca,er. Baaxa c . bee                       !
/JAC
M StaW                                 /JAC     $2       h         -
$2 h
                                                                              ,    D/LS '                   l witc. riv       i?,ar= eer                               ;
D/LS '
4.Au.t.lAmu                                          _
4.Au.t.lAmu witc.
nrac. LIV       62cmw douoamrace.                         \
riv i?,ar= eer L. M
L. M    l'A vAu luu Mogicousry                       AIRC     ElY     QPUTY IMEld4AL.dD'*dW48tC UtLLmm           'BEc. nee         10 0c. MPA.- DbsLI-l Dngteer PD IU"1 c.a. tL&                               au w               g aia W ne 22 Ahnotu                             xve 22               Tr".o.e Pr.rwur Zarnw dls vx.
'A v A u nrac.
        ~3,A. /tM L.-                       N/c AI M         ?m   PhTec NWW-votet                           l
LIV 62cmw douoamrace.
        $$ $97N                           1lhl0b                   bec bsiinN,f bvbd
\\
        /fsetAr Ow ry                       NApn                 & < a 4 f.x:,n w # N As.t obw       Muo II o Q           A>SPD                     Tde   m o me, M.T. 60YCE                           gypto               DrsM C.M 9eseact 5%rr s A"4oo.                           11A M             /tMl't*06/ . saAwutuo b.: a r A.m                             A mi                 L e.a Mra,m, 4,,-
l luu Mogicousry AIRC ElY QPUTY IMEld4AL.dD'*dW48tC UtLLmm
0sA U TA M AEN                           NPO               hsn'w $$lbandse fd           J eet.
'BEc. nee 10 0c. MPA.- DbsLI-l Dngteer PD IU"1 g aia W ne c.a. tL&
J f       (All e <                   A/fPD             t 4. cl   G ,, e   -Se (.,,, e,,
au w 22 Ahnotu xve 22 Tr".o.e Pr.rwur Zarnw dls vx.
9,
~3,A. /tM L.-
                                                                                                              )
N/c AI M
M'M ''> P P M S-                             NffD           LAbwWrNb P9CbS . SMW                 4-.
? m PhTec NWW-votet
ZoM     C> /fe%st bJ                   Alff0             GNcoUCcA,dc MJMuot
$$ $97N 1lhl0b bec bsiinN,f bvbd
        +                                         j ._                         . -r ._ 7 4y r.s
/fsetAr Ow ry NApn
: j.        .
& < a 4 f.x:,n w # N As.t obw Muo II o Q A>SPD Tde m o me, M.T. 60YCE gypto DrsM C.M 9eseact 5%rr s A"4oo.
l _ j'                   't
11A M
                                                                    .      L        CI
/tMl't*06/. saAwutuo a r A.m A mi L e.a Mra,m, 4,,-
 
b.:
o                                                                                                                  1 ENFORCEMENT CONFERENCE ATTENDANCE
0sA U TA M AEN NPO hsn'w $$lbandse fd eet.
* l l
J J
LICENSEE / FACILITY    flebraska Public Power District                                                        ;
f (All e <
Cooper fluclear Station                                                                i TIME /DATE          september 16, 1994 at 9 a.m.                                                            l MEETING LOCATION        Training Conference Room EA NUMBER          EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)        ORGANIZATION                                      TITLE NRC ATTENDEES 16      tsT !          [,    (.c o                    Set hnicak                              $5 N vu? SocM gr&        /?csijd-          b8S              faurex                      [prpeerce.
A/fPD t 4. cl G,, e
Su        k oo cak            CGC                    jrei c,                  d c _J OM J                                                                      J
- S e
    \C.REN Mx,              3 rG 00 9 - W lueu Eh'G W/ m M C 3 % u..r v      .c D,a vt/ - Diz P (Acnm, Yea-r:xx'A'jksJa n?-
(.,,,
  /butar b frevoAC ? Lucce s Ser.                  v. n,  !^!/c /=                    .-% : vw r
e,, 9,
  ~P<enes S~<~n a              hik><ci Pomc                Mu s pi                      k Jear %1s .
)
N Y~ A 97DIEduS          QFfice af Eu % m- E W % g y S f c- e i g is y-W Af N c t. W Aesc it    RE611 - De P                    RE5t der # M5 Pang -(95 bN L ttttT                2M        10  WS              dchn=3 #4M                                    n Gckos-
M'M ''> P P M S-NffD LAbwWrNb P9CbS. SMW 4-.
ZoM C> /fe%st bJ Alff0 GNcoUCcA,dc MJMuot
+
j._
r.s
. -r._ 7 4y l _ j'
't L
CI j.


r
o ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY flebraska Public Power District Cooper fluclear Station i
+            ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE       september 16, 1994 at 9 a.m.
TIME /DATE september 16, 1994 at 9 a.m.
MEETING LOCATION     Training Conference Room EA NUMBER       EA 94-164, EA 94-165, EA 94-166 ORGANIZATION                  TITLE NAME (PLEASE PRINT)
MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)
ATTENDEES
ORGANIZATION TITLE NRC ATTENDEES 16 tsT !
      & bhhv7?N           ftY- EbioY 'l               fh r N     l
[,
          /
(.c o Set hnicak
$5 N vu? SocM gr&
/?csijd-b8S faurex
[prpeerce.
Su k oo cak CGC jrei c, d c _J OM J
J
\\C.REN Mx, 3 rG 00 9 - W lueu Eh'G (Acnm, Yea-r:xx'A'jksJa W/ m M C 3 % u..r D,a vt/ - Diz P n?-
v
.c
/butar b frevoAC ?
Lucce s Ser.
: v. n,
!^!/c /=
.-% : vw r
~P<enes S~<~n a hik><ci Pomc Mu s pi k Jear %1s.
N Y~ A 97DIEduS QFfice af Eu % m-E W % g y S f c-e i g is y-W Af N c t. W Aesc it RE611 - De P RE5t der # M5 Pang -(95 bN L ttttT 2M 10 WS dchn=3 #4M n Gckos-
* r ENFORCEMENT CONFERENCE ATTENDANCE
+
LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE september 16, 1994 at 9 a.m.
MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)
ORGANIZATION TITLE ATTENDEES
& bhhv7?N ftY-EbioY 'l fh r N l
/


ENFORCEMENT CONFERENCE ATTENDANCE                             .
ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE September 16, 1994 at 9 a.m.
LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE     September 16, 1994 at 9 a.m.
MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)
MEETING LOCATION       Training Conference Room EA NUMBER       EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)     ORGANIZATION                   TITLE LICENSEE ATTENDEES lemzo A Sess45           Ne3 Pm'PmT,h s m a           3/v /Vfp. Q A l's ,~ c ., G. J< ass   t)en A s e,e ers., k.-       a mn k ,, &arpreur-l
ORGANIZATION TITLE LICENSEE ATTENDEES lemzo A Sess45 Ne3 Pm'PmT,h s m a 3/v /Vfp. Q A l's,~ c.,
G. J< ass t)en A s e,e ers., k.-
a mn k,, &arpreur-


.            ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY   Nebraska Public Power District Cooper Nuclear Station TIME /DATE       September 16, 1994 at 9 a.m.
ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE September 16, 1994 at 9 a.m.
MEETING LOCATION     Training Conference Room EA 94-164, EA 94-165, EA 94-166 EA NUMBER ORGANIZATION                      TITLE NAME (PLEASE PRINT)
MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)
ATTENDEES hG bh'Y ki       khAy NWCO{Itl Eled.S>sh                 hinha {o y
ORGANIZATION TITLE ATTENDEES hG bh'Y ki khAy NWCO{Itl Eled.S>sh hinha {o y


;            ,      e   i .a                                       ,.
e i
                                                                , 4 ATTACHMENT 2.
.a 4
ATTACHMENT 2.
NEBRASKA PUBLIC POWER DISTRICT NUCLEAR REGULATORY COMMISSION - REGION IV ENFORCEMENT CONFERENCE NRC INSPECTION REPORT NOS. 50-298/94-14, 16,19 SEPTEMBER 16,1994 H
NEBRASKA PUBLIC POWER DISTRICT NUCLEAR REGULATORY COMMISSION - REGION IV ENFORCEMENT CONFERENCE NRC INSPECTION REPORT NOS. 50-298/94-14, 16,19 SEPTEMBER 16,1994 H


j
j d
* d             *,
AGENDA 1.
AGENDA
INTRODUCTION / OVERVIEW J. MUELLER II.
: 1. INTRODUCTION / OVERVIEW             J. MUELLER                 ,
DISCUSSION OF ISSUES /
II. DISCUSSION OF ISSUES /
ISSUE-SPECIFIC CORRECTIVE ACTIONS A.
ISSUE-SPECIFIC CORRECTIVE ACTIONS A. CONTROL ROOM ENVELOPE           S.FREBORG                   .
CONTROL ROOM ENVELOPE S.FREBORG B.
B. CONTAINMENT PENETRATIONS       M.BOYCE C. UNDERVOLTAGE DEVICES           D. BUMAN 111. CLOSING REMARKS                     J. MUELLER l
CONTAINMENT PENETRATIONS M.BOYCE C.
l M                                                         - - - - - _
UNDERVOLTAGE DEVICES D. BUMAN 111.
CLOSING REMARKS J. MUELLER l
l M - - - - -


l 1
l L
9                 '
1 9
4 4
4 4
W E
W E
I V
IVR EV R
R E
E O
V  R O  E
L
          / L N L E       -
/
O U M2 I
M2 L
M C   .
N E
J D
O U
O R
IT M
T h
C U
J D
O RT h
N I
N I
4


n     ,                : _* , '
n 1
1 4
4 DISCUSSION OF APPARENT VIOLATION CONTROL ROOM ENVELOPE S.FREBORG.
DISCUSSION OF APPARENT VIOLATION CONTROL ROOM ENVELOPE S.FREBORG.
1 H 1
1                                             <
 
H j ,
j CONTROL ROOM EMERM4CY FILTER SYSTEM CHRONOLOGY April 11,1994 Control Room Emergency Filter System declared inoperable to perform 1
CONTROL ROOM EMERM4CY FILTER SYSTEM CHRONOLOGY April 11,1994                                                                                         Control Room Emergency Filter System declared inoperable to perform 1                                                                                                       preventive maintenance on envelope boundary door.
preventive maintenance on envelope boundary door.
J April 11,1994                                                                                         Surveillance Procedure 6.3.17.18, ." Control Room Envelope Pressurization Test," performed -- test failed - LCO 3.12.A.3 allows continued plant operation for 7 days.
J April 11,1994 Surveillance Procedure 6.3.17.18,." Control Room Envelope Pressurization Test," performed -- test failed - LCO 3.12.A.3 allows continued plant operation for 7 days.
April 11-                                                                                             Repair efforts performed; re-test did not pass.
April 11-Repair efforts performed; re-test did not pass.
April 18,1994 April 18,1994                                                                                       NRC grants 14 day extension to LCO 3.12.A.3.
April 18,1994 April 18,1994 NRC grants 14 day extension to LCO 3.12.A.3.
; April 18-                                                                                           Leak repair efforts conducted.                                                   ,
April 18-Leak repair efforts conducted.
. April 25,1994 April 25,1994                                                                                       STP 93-257 performed to quantify interaction between the Control Room Envelope and plant areas that share common boundary conditions.
April 25,1994 April 25,1994 STP 93-257 performed to quantify interaction between the Control Room Envelope and plant areas that share common boundary conditions.
April 28,1994                                                                                       S.P. 6.3.17.18 completed satisfactorily.
April 28,1994 S.P. 6.3.17.18 completed satisfactorily.
April 30,1994                                                                                       CREFS declared operable.
April 30,1994 CREFS declared operable.
t May 25,1994_                                                                                         CNS shutdown due to undervoltage device tie-rap issue.
t May 25,1994_
H                                                                                                                                                                                         :
CNS shutdown due to undervoltage device tie-rap issue.
L
H L,
_ . . _ . _ _ _ . _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ . _ _ . . . _ _ . _ _ _ _ _ _ _ _ _-              o
o


                                                                                                                                                                                                    .c .,-
.c l
l                                                                                                                                                                                                 .
l CONTROL ROOM EMERGENCY FILTER SYSTEM ' CHRONOLOGY June 22,1994 S.P. 6.3.17.18 revised to include administrative and operability acceptance l
l                       CONTROL ROOM EMERGENCY FILTER SYSTEM ' CHRONOLOGY June 22,1994   S.P. 6.3.17.18 revised to include administrative and operability acceptance l                           criteria.
criteria.
l June 23,1994   Test performed on Control Room Envelope emergency mode -- failed l                           administrative criteria; satisfied operability criteria; CR initiated.
June 23,1994 Test performed on Control Room Envelope emergency mode -- failed l
l July 7,1994     Technical meeting between Nebraska Public Power District and the Nuclear Regulatory Commission Regarding Control Room Emergency Filter System.
l administrative criteria; satisfied operability criteria; CR initiated.
l July 7,1994 Technical meeting between Nebraska Public Power District and the Nuclear Regulatory Commission Regarding Control Room Emergency Filter System.
l
l
                              ~
~ -


CONTROL ROOM ENVELOPE APPARENT VIOLATION 94-19-01 Technical Specification 3.12.A.1, " Control Room Emergency Filtration System" (CREFS) was not satisfied in that the CREFS could not meet its intended design function (i.e., maintain a positive pressure). Therefore, the Control Room Emergency Filter System, which provides air flow to maintain a positive pressure in the Control Room Envelope, was inoperable from 1989 to 1994.
CONTROL ROOM ENVELOPE APPARENT VIOLATION 94-19-01 Technical Specification 3.12.A.1, " Control Room Emergency Filtration System" (CREFS) was not satisfied in that the CREFS could not meet its intended design function (i.e., maintain a positive pressure). Therefore, the Control Room Emergency Filter System, which provides air flow to maintain a positive pressure in the Control Room Envelope, was inoperable from 1989 to 1994.
DISCUSSION:
DISCUSSION:
e    The surveillance procedure was inadequate.
The surveillance procedure was inadequate.
e   The maintenance program to maintain the Control Room Envelope was inadequate.
e The maintenance program to maintain the Control Room Envelope was inadequate.
e     Lessons learned from secondary containment issue were not adequately applied to the Control Room Envelope.
e Lessons learned from secondary containment issue were not adequately applied to the e
* Engineering assumptions regarding design basis were nonconservative.
Control Room Envelope.
* While licensee personnel manipulation of pressures in adjoining buildings to obtain the required pressure in the Control Room did not violate procedures, it was an unacceptable practice.
Engineering assumptions regarding design basis were nonconservative.
H                                                                                                                                                   .  .
While licensee personnel manipulation of pressures in adjoining buildings to obtain the required pressure in the Control Room did not violate procedures, it was an unacceptable practice.
H.


                                                                                                                          / .,-
/
CONTROL ROOM ENVELOPE (CONT)
CONTROL ROOM ENVELOPE (CONT)
APPARENT VIOLATION 94-19-01 SAFETY SIGNIFICANCE:
APPARENT VIOLATION 94-19-01 SAFETY SIGNIFICANCE:
e                      Operator doses would have remained within GDC 19 and Standard Review Plan, Section 6.4 Limits based upon analysis of projected unfiltered inleakage.
Operator doses would have remained within GDC 19 and Standard Review Plan, Section e
6.4 Limits based upon analysis of projected unfiltered inleakage.
REGULATORY SIGNIFICANCE:
REGULATORY SIGNIFICANCE:
o                      Continuing failure by NPPD to adequately address Control Room Emergency Filter System deficiencies.
Continuing failure by NPPD to adequately address Control Room Emergency Filter System o
deficiencies.
MITIGATING FACTORS:
MITIGATING FACTORS:
e                     NPPD identified this deficiency and pursued necessary resolution.
e NPPD identified this deficiency and pursued necessary resolution.
CORRECTIVE ACTIONS:
CORRECTIVE ACTIONS:
e                     Hardware modifications.
e Hardware modifications.
e                     Safety culture improvements.
e Safety culture improvements.
H   . _ _ _ _ _ _ .  .- _ _ - _ - _ - - -
H. _ _ - _ - _ - - -


CONTROL ROOM ENVELOPE (CONT)
CONTROL ROOM ENVELOPE (CONT)
CORRECTIVE ACTIONS                                             STATUS CAUSE:
CORRECTIVE ACTIONS STATUS CAUSE:
INADEQUATE DESIGN WITH INSUFFICIENT MARGIN.
INADEQUATE DESIGN WITH INSUFFICIENT MARGIN.
ACTION (Short Term):
ACTION (Short Term):
Install 1000 CFM capacity emergency fan to     Modification to be installed upon approval of required increase the pressurization margin within the Technical Specification change, which is expected the existing capability of the filter.             first week of October.
Install 1000 CFM capacity emergency fan to Modification to be installed upon approval of required increase the pressurization margin within the Technical Specification change, which is expected the existing capability of the filter.
first week of October.
ACTION (Lona Term):
ACTION (Lona Term):
Implement necessary modifications as a result Control Room Habitability System Design Criteria
Implement necessary modifications as a result Control Room Habitability System Design Criteria of the completion of the Control Room Document scheduled for completion 9-30-94. Submit l
,      of the completion of the Control Room         Document scheduled for completion 9-30-94. Submit l     Habitability System design criteria document. EWR for any necessary modifications by 10-15-94.
Habitability System design criteria document.
H   8-
EWR for any necessary modifications by 10-15-94.
H 8-


s CONTROL ROOM ENVELOPE (CONT)
s CONTROL ROOM ENVELOPE (CONT)
CORRECTIVE ACTIONS                     STATUS CONTRIBUTING FACTORS:
CORRECTIVE ACTIONS STATUS CONTRIBUTING FACTORS:
* INADEQUATE PM FREQUENCY FOR INSPECTION AND LUBRICATION OF DOOR SEALS.
INADEQUATE PM FREQUENCY FOR INSPECTION AND LUBRICATION OF DOOR SEALS.
* SENSITIVITY OF EXISTING DESIGN TO PROPER BALANCE BETWEEN CONTROL ROOM AND CABLE SPREADING ROOM NOT RECOGNIZED.
SENSITIVITY OF EXISTING DESIGN TO PROPER BALANCE BETWEEN CONTROL ROOM AND CABLE SPREADING ROOM NOT RECOGNIZED.
* LEAK PATHS CREATED DUE TO INADEQUATE WORK INSTRUCTIONS.
LEAK PATHS CREATED DUE TO INADEQUATE WORK INSTRUCTIONS.
* DOORS OPENING IN WRONG DIRECTION (POSITIVE PRESSURE TENDS TO DISENGAGE
DOORS OPENING IN WRONG DIRECTION (POSITIVE PRESSURE TENDS TO DISENGAGE
                                                                        ')OOR FROM DOOR SEAL).
')OOR FROM DOOR SEAL).
* INADEQUATE TURBINE BUILDING DP SENSOR MAINTENANCE.
INADEQUATE TURBINE BUILDING DP SENSOR MAINTENANCE.
H .g.
H
.g.


o CONTROL ROOM ENVELOPE (CONT)
o CONTROL ROOM ENVELOPE (CONT)
CORRECTIVE ACTIONS                                                                                                       STATUS ACTIONS:
CORRECTIVE ACTIONS STATUS ACTIONS:
* Increase frequency of Control Room envelope       Complete.
Increase frequency of Control Room envelope Complete.
door seal PM (07678) to weekly
door seal PM (07678) to weekly Revise Procedure 7.0.1/7.0.5 to ensure that all Complete.
* Revise Procedure 7.0.1/7.0.5 to ensure that all   Complete.
maintenance activities that relate to Control Room envelope doors or penetrations or that affect adjacent area HVAC Systems (listed in S.P. 6.3.17.18) flow rate or balance; include PMT requirements to perform 6.3.17.18.
maintenance activities that relate to Control Room envelope doors or penetrations or that affect adjacent area HVAC Systems (listed in S.P. 6.3.17.18) flow rate or balance; include PMT requirements to perform 6.3.17.18.
M                                                                                                                                                                                                                                                                 . '.
i i
m -___ __ m __m__. m- m - m_==___.u.                                     _ . _ _ _ _ _ _ . _ _ _ _ _ - _ - _ . _ _ _ _ . _ _ _ _ _ _ . _ _ _ . _ _ _ _ . - . _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ . _ _ _ . _ . _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _
M '.
m m
__m__.
m-m - m==
.u.


s       . . .                                                        ..    .-
s CONTROL ROOM ENVELOPE (CONT)
CONTROL ROOM ENVELOPE (CONT)
CORRECTIVE ACTIONS STATUS Record the flow rates for all flow paths in the This item is being re-evaluated. The implementation of Control Room Ventilation System during both DC 94-262 may negate the need to implement this normal and emergency modes of operation to corrective action.
CORRECTIVE ACTIONS                                                                       STATUS
* Record the flow rates for all flow paths in the                           This item is being re-evaluated. The implementation of Control Room Ventilation System during both                               DC 94-262 may negate the need to implement this normal and emergency modes of operation to                               corrective action.
provide a baseline for future system balancing.
provide a baseline for future system balancing.
* Evaluate if a revision to design review checklists                       Scheduled for completion 10-31-94.
Evaluate if a revision to design review checklists Scheduled for completion 10-31-94.
in CNS Procedure 3.4.6 is needed to provide more appropriate questions to ensure that the Control Room pressure boundary requirements are adequately addressed in DCs.
in CNS Procedure 3.4.6 is needed to provide more appropriate questions to ensure that the Control Room pressure boundary requirements are adequately addressed in DCs.
* Revise 6.3.17.18, as necessary, to control all                           Complete.
Revise 6.3.17.18, as necessary, to control all Complete.
variables in a manner to ensure consistent test results that are representative of the limiting post-accident conditions.
variables in a manner to ensure consistent test results that are representative of the limiting post-accident conditions.
* Evaluate the possibility of caulking the inactive                         Complete. Evaluation indicates caulking is             l leaf on doors H3OO, N305 to reduce leakage                               unnecessary.
Evaluate the possibility of caulking the inactive Complete. Evaluation indicates caulking is l
leaf on doors H3OO, N305 to reduce leakage unnecessary.
through the seals.
through the seals.
e                                                 increase the frequency of performance of S.P.                             Complete.
e increase the frequency of performance of S.P.
Complete.
6.3.17.18 from once per cycle to monthly.
6.3.17.18 from once per cycle to monthly.
H   ~
H
                                                                                                                                -11_
~
-11_


                            '                                                    .                                i CONTROL ROOM ENVELOPE (CONT)
i CONTROL ROOM ENVELOPE (CONT)
CORRECTIVE ACTION (S)                                             STATUS
CORRECTIVE ACTION (S)
* Develop a PM to inspect outside air sensing line   Complete.
STATUS Develop a PM to inspect outside air sensing line Complete.
filters on an annual basis for filter element plugging and gasket Isaks. The sensing lines should be blown out at the same time and inspected for leaks or damage.
filters on an annual basis for filter element plugging and gasket Isaks. The sensing lines should be blown out at the same time and inspected for leaks or damage.
* Evaluate the use of a more accurate manometer       Complete. Evaluation concludes that existing for all future S.P. 6.3.17.18 testing. If use of   manometer should be retained for S.P. 6.3.17.18.
Evaluate the use of a more accurate manometer Complete. Evaluation concludes that existing for all future S.P. 6.3.17.18 testing. If use of manometer should be retained for S.P. 6.3.17.18.
the present manometer is continued, a more rigid mounting method should be determined.
the present manometer is continued, a more rigid mounting method should be determined.
* Investigate the possibility of replacing door       Complete. Replacement of this door is unnecessary H200 with a door that swings inward.               due to the low dP experienced.
Investigate the possibility of replacing door Complete. Replacement of this door is unnecessary H200 with a door that swings inward.
due to the low dP experienced.
l l
l l
M                                                                                                             .  ..
M.


                                                                                              .                          .1                             .; ;
.1 CONCLUSION Control Room Envelope could not consistently satisfy design function.
CONCLUSION e Control Room Envelope could not consistently satisfy design function.
e Adequate corrective actions have been taken to address hardware issues.
e Adequate corrective actions have been taken to address hardware issues.
e Hardware modifications will significantly increase available margin.
e Hardware modifications will significantly increase available margin.
* Steps have been taken to improve the safety culture.
e Steps have been taken to improve the safety culture.
l l
l l
l H  . _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - .                  . _ _ _ _ .
H l.


                                  '            ' ~
i i
  , , i   . i   -
T
                    . : ..    . T   , ''~''. i'     .,. ,
' ' ~ ' '.
DISCUSSION OF APPARENT VIOLATIONS CONTAINMENT PENETRATIONS M.BOYCE                                   .
i'
i l                     M                                                           '
~
DISCUSSION OF APPARENT VIOLATIONS CONTAINMENT PENETRATIONS M.BOYCE i
l M '


  ,                                                                                                            ,    t .  . -
t CHRONOLOGY OF PENETRATION ISSUES June 17,1993 Inspection Report 93-17 issued.
CHRONOLOGY OF PENETRATION ISSUES June 17,1993                                                                                             Inspection Report 93-17 issued.
October 12,1993 Notice of violation and proposed imposition of civil penalty from IR 93-17.
October 12,1993                                                                                           Notice of violation and proposed imposition of civil penalty from IR 93-17.
Level IV violation for failure to have an appropriate rationale for reverse direction testing.
Level IV violation for failure to have an appropriate rationale for reverse direction testing.
Level IV violation for failure to leak rate test the internals of the hydrogen / oxygen analyzers.
Level IV violation for failure to leak rate test the internals of the hydrogen / oxygen analyzers.
November 12,1993                                                                                         District response to IR 93-17 made commitment to conduct a
November 12,1993 District response to IR 93-17 made commitment to conduct a
                                                                                                                " detailed review of all containment penetrations and their associated Appendix J testing requirements... Prior to startup from the next refueling outage."
" detailed review of all containment penetrations and their associated Appendix J testing requirements... Prior to startup from the next refueling outage."
i i
i i
December 2,1993                                                                                           Memo from R. E. Wilbur to K. C. Walden directing that the design basis reconstitution for the Primary Containment System be expedited.
December 2,1993 Memo from R. E. Wilbur to K. C. Walden directing that the design basis reconstitution for the Primary Containment System be expedited.
January 1994                                                                                             Work started on Primary Containment design basis document.
January 1994 Work started on Primary Containment design basis document.
H                     _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - - - _ _ - _ _ _ . _ - _ _ _ _ _ _ _ - _ _ _ - _ . - _ - .                  . _ -
H - - -


a       :  i.                       ,
a i.
CHRONOLOGY OF PENETRATION ISSUES February 1994                                                                                                                             Development of Primary Containment walkdown procedure started (SP 94-202).
CHRONOLOGY OF PENETRATION ISSUES February 1994 Development of Primary Containment walkdown procedure started (SP 94-202).
May 17,1994                                                                                                                               SP 94-202, Primary Containment walkdown procedure approved.
May 17,1994 SP 94-202, Primary Containment walkdown procedure approved.
May 18,1994                                                                                                                               SP 94-202 walkdown started.
May 18,1994 SP 94-202 walkdown started.
May 27,1994                                                                                                                               Plant in cold shutdown due to Electrical Distribution System concerns.
May 27,1994 Plant in cold shutdown due to Electrical Distribution System concerns.
June 2,1994                                                                                                                               CR 94-241 written due to discovery of penetration X-218.
June 2,1994 CR 94-241 written due to discovery of penetration X-218.
;                June 6,1994                                                                                                                               CR 94-261 written due to discovery of penetration X-209A-D.
June 6,1994 CR 94-261 written due to discovery of penetration X-209A-D.
1 i                 June 6,1994                                                                                                                               Started review of as-built containment penetration information.
1 i
l June 11,1994                                                                                                                               CR 94-286 written documenting numerous design and testing concerns with Primary Containment.
June 6,1994 Started review of as-built containment penetration information.
H                                                                                                                                                                                                                                 . '.
l June 11,1994 CR 94-286 written documenting numerous design and testing concerns with Primary Containment.
H '.


h
h
                              .  .  .    .  .  .  .i                               .
.i CHRONOLOGY OF PENETRATION ISSUES June 11 through Continued review penetration-by-penetration of containment June 20,1994 design and testing.
CHRONOLOGY OF PENETRATION ISSUES June 11 through       Continued review penetration-by-penetration of containment June 20,1994         design and testing.
June 14,1994 Presentation to NRC Region IV on Primary Containment.
June 14,1994         Presentation to NRC Region IV on Primary Containment.
June 20,1994 CR 94-0325 written to document tilN and IVP piping penetrating Primary Containment.
June 20,1994       CR 94-0325 written to document tilN and IVP piping penetrating Primary Containment.
June 21,1994 CR 94-0377 Written to document failure to leak rate test pressure instruments.
June 21,1994         CR 94-0377 Written to document failure to leak rate test pressure instruments.
June 23,1994 CR 94-0378 written to document LLRT failure of IA-65CV.
June 23,1994         CR 94-0378 written to document LLRT failure of IA-65CV.
June 27,1994 Technical presentation to NRR and Region IV in Rockville.
June 27,1994       Technical presentation to NRR and Region IV in Rockville.
Jul; 29,1994 NRC Management Meeting.
Jul; 29,1994       NRC Management Meeting.
H :..
H   : .. __ _ _ _ .


CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 1 APPARENT VIOLATION Containment isolation valves that existed in the plant were not shown on flow diagram No. 2028, " Reactor Building and Drywell Equipment Drain System," revision N27. Flow diagram No. 2028 was not included on the safety-related drawing list in accordance with Cooper Nuclear Station Engineering Procedure 3.8, " Drawing Control Procedure,"
CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 1 APPARENT VIOLATION Containment isolation valves that existed in the plant were not shown on flow diagram No. 2028, " Reactor Building and Drywell Equipment Drain System," revision N27. Flow diagram No. 2028 was not included on the safety-related drawing list in accordance with Cooper Nuclear Station Engineering Procedure 3.8, " Drawing Control Procedure,"
Line 723: Line 855:
NRC identified this as Example 1 of an apparent violation of 10 CFR 50 APPENDIX B, Criterion 111.
NRC identified this as Example 1 of an apparent violation of 10 CFR 50 APPENDIX B, Criterion 111.
DISCUSSION:
DISCUSSION:
* The District violated Procedure 3.8 in that the drawing list was incorrect.
The District violated Procedure 3.8 in that the drawing list was incorrect.
Did not affect control of safety-related drawings.
Did not affect control of safety-related drawings.
Reason for list was as-build project scope (2028 should be on list).
Reason for list was as-build project scope (2028 should be on list).
Procedure 3.7 controls distribution of safety-related drawings.
Procedure 3.7 controls distribution of safety-related drawings.
Other parts of Procedure 3.8 control revision.
Other parts of Procedure 3.8 control revision.
* There were 5 valves not shown on drawing 2028.
There were 5 valves not shown on drawing 2028.
4 Manual instrument air valves to AOVs in drywell.
4 Manual instrument air valves to AOVs in drywell.
1 Manual valve on vent line.
1 Manual valve on vent line.
H                                                                                           '.    .
H '.


                                                                                                                                                                        ~
~
CONTAINMENT PENETRATIONS (CONT)
CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 1. EXAMPLE 1 SAFETY SIGNIFICANCE:
APPARENT VIOLATION 1. EXAMPLE 1 SAFETY SIGNIFICANCE:
* No effect on component classification or drawing revision, content, distribution, or use.
No effect on component classification or drawing revision, content, distribution, or use.
Procedure 3.13 Controls classification.
Procedure 3.13 Controls classification.
e                               Did not affect treatment of any safety-related component (maintenance, testing, design, etc.).
e Did not affect treatment of any safety-related component (maintenance, testing, design, etc.).
Engineering Date File (EDF) Provides component classification for work / design control.
Engineering Date File (EDF) Provides component classification for work / design control.
* Manual vent valve was shown on a drawing but was not shown in the correct configuration.
Manual vent valve was shown on a drawing but was not shown in the correct configuration.
Two valves and cap shown vs. one valve and cap actual.
Two valves and cap shown vs. one valve and cap actual.
* The instrument Air Valves are on other drawings and in EDF and controlled by operating procedures.
The instrument Air Valves are on other drawings and in EDF and controlled by operating procedures.
e                               Minimal safety significance.
e Minimal safety significance.
H   __ -- -_ - - - - - - - _ _ _ - _ _ _ _ - _ _ _ _ . _ - - . _ - - - _ - - _ -
H -- -


CONTAINMENT PENETRATIONS (CONT)
CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 1. EXAMPLE 1 REGULATORY SIGNIFICANCE:
APPARENT VIOLATION 1. EXAMPLE 1 REGULATORY SIGNIFICANCE:
* Had 2028 been on the list, it would have been in as-built verification project.
Had 2028 been on the list, it would have been in as-built verification project.
* Should have recognized and corrected the deficiency in Procedure 3.8.
Should have recognized and corrected the deficiency in Procedure 3.8.
MITIGATING FACTORS:
MITIGATING FACTORS:
* The District identified the drawing errors during the containment walkdown.
The District identified the drawing errors during the containment walkdown.
* There was no impact on safety-related drawing control due to the missing drawing on the Procedure 3.8 list.
There was no impact on safety-related drawing control due to the missing drawing on the Procedure 3.8 list.
CAUSE:
CAUSE:
* Insufficient management oversight and guidance.
Insufficient management oversight and guidance.
Recognized drawing list discrepancies and failed to take corrective actions.
Recognized drawing list discrepancies and failed to take corrective actions.
Failed to establish an adequate program to identify correct drawing scope.
Failed to establish an adequate program to identify correct drawing scope.
CORRECTIVE ACTIONS:
CORRECTIVE ACTIONS:
e   Revising Procedure 3.8.
e Revising Procedure 3.8.
H                                                                                         '. '.
H '.


                                                                                      ,J .,
,J CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 1 CORRECTIVE ACTION (S)
CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 1 CORRECTIVE ACTION (S)                                 STATUS CAUSE:
STATUS CAUSE:
INSUFFICIENT MANAGEMENT OVERSIGHT AND GUIDANCE.
INSUFFICIENT MANAGEMENT OVERSIGHT AND GUIDANCE.
ACTIONS:
ACTIONS:
Revising Procedure 3.8.                     Procedure change in progress.
Revising Procedure 3.8.
Procedure change in progress.
l l
l l
t M   . - _ _ _    ___
t M. -


                                                                                                          ~ i w
i
C W
~
                                                                    "                      V C                       C
wCW V
                                                            .:m:
C C
O                       3             !
.:m:
U     E                       O              I 3       g                       a O     C                       Q y     5                       o U
O 3
                                                            "      m                        H i
U O
C     g C
E 3
3 O   V O
g a
2C              I e    C                         G             '
Q O
w   *D                       #
C y
N        C     C 8                      .C             !
5 oU m
W        N                            .t m    2                         3 MJ           C    m                                       l 2 1                                         e OE           3m g                     2 gNW          g   i               E         C O
i H
l m
C g
* a    y              O O
3 C
j A                                       l N           e                   W         O               '
O V
C E2 Wq          .C
2 O
                                                                    .9 C
C I
3e e
C G
E=            5                        I 1-           3   ~~             u
e w
* w       n
*D N
                                                >            n      OC            w   es .
C C
                  '                                            g    a             e   e   'O
.C N
                                                                    -O                C                    l C. y  *C        *
8
                                                                                      =      "
.t W
2 MJ m
3 2 1 C
m e
OE 3
g 2
m gN m
g i
E C
l W
O O
y j
a O
A l
N e
W O
E2 C
C e
.C
.9 5
3 Wq 1-3 E=
e u
n
~~
w n
O C w
es g
-O a
e e
'O C
W "$;
W "$;
E     Ce             b "O               !
*C
g      9 .t               =     c d- Q=        x      EU             #  #    8 W      C
=
                                                                                  .6   $    0) 2.
C.
4 >b O
y E
                                                                    *a g'
Ce b
                                                                    -              m   -
"O d-Q=
C 5"
9.t e=
m 9 2                 53                     .
c gx EU 8
l ZW          *d E
: 2. >b
Ea o  ""
.6 W
                                                                    ~E             S'
C 0)
                                                                                        =
*a g' m
e a
C 4
4 O
O 5
Og*4          ss   Ca             C 8   8     3 CO                  >  3 1              $e <1               a    e
9 2 53 m
                                                              . .e 3      -
E
C   >  r*
*d Z W O *4 Ea
2                          O _
~E S'
t.' o.          .  .    .
4 o
O_
e C
                                                        .  ) C.
=
a   a   ~
a Og ss Ca 8
8 3
$ <1 3a e
CO 1
..e e
C r
3 O
2 O_
) C.
: t. o.
a a
e H
e H
* E
* E "k
                                                                                    @  C     a 4
~
a C
C a
e .C "k
4 0
                                                                    >              0  m    C O
m C
a   E O   D$     ho              C        o
e.C C
                                                        ~
E O
                                                        >  *~ C eO   O c-g S     O 2        m   E p    WU    "%        9 m
a O
                                                                                      .E    56 z     Eg   EO         W  3     = .C     v m     .. sC         O  M  O    ** E*
D$
E    9t          O           m    m "C            f J C   O 'C       D r               ""
h a
4                M   O Q. e Ds L   r re     $O es W
o
s           ,
*~ C o
C eO O c-2 g
S O
~
m E
W U m
z Eg EO 9
3
.E 56 p
=
.C v W
m sC
** E O
M O
4 J C O 'C D
r m
m "C f
E 9t O
s M
O Q.
e
$O W
D L
r re es s
l
l


                                                                                                                            ~~
~~
                                                                                                                                                                    ..                    .f .,
.f CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 2 SAFETY SIGNIFICANCE:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 2 SAFETY SIGNIFICANCE:
e MISSING CAPS Each of the 13 cases of missing caps had a normally closed manual valve in the line.
e   MISSING CAPS
Each of the manual valves had either been tested during the ILRT or would not be exposed to containment atmosphere.
        -    Each of the 13 cases of missing caps had a normally closed manual valve in the line.
SINGLE VALVES Each of the 30 single manual valves either was not in direct communication with the containment atmosphere or was ILRT tested.
      -    Each of the manual valves had either been tested during the ILRT or would not be exposed to containment atmosphere.
* SINGLE VALVES
      -    Each of the 30 single manual valves either was not in direct communication with the containment atmosphere or was ILRT tested.
As-found LLRTs successful.
As-found LLRTs successful.
* THERMOCOUPLES Subjected to ILRT pressure.
THERMOCOUPLES Subjected to ILRT pressure.
Passed an as-found LLRT (cumulative leakage 0.11 SCFH).
Passed an as-found LLRT (cumulative leakage 0.11 SCFH).
l Passive barriers.
Passive barriers.
i j
l i
H 1
H j 1


CONTAINMENT PENETRATIONS (CONT)
CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 1. EXAMPLE 2 REGULATORY SIGNIFICANCE:
APPARENT VIOLATION 1. EXAMPLE 2 REGULATORY SIGNIFICANCE:
e    Result of original design and should have been identified sooner.
Result of original design and should have been identified sooner.
e Lack of appropriate procedural controls on manual valves and caps.
e Lack of appropriate procedural controls on manual valves and caps.
MITIGATING FACTORS:
e MITIGATING FACTORS:
e identified as a result of broad corrective actions for IR 93-17 violation.
identified as a result of broad corrective actions for IR 93-17 violation.
e Single manual valve isolation resulted from the DISTRICT'S original Licensing position on Safety Guide 11 as provided in FSAR Question 5.5 and as included in the FSAR.
e Single manual valve isolation resulted from the DISTRICT'S original Licensing position e
The DISTRICT does not consider this an acceptable position to meet the containment
on Safety Guide 11 as provided in FSAR Question 5.5 and as included in the FSAR.
!    design objectives.
The DISTRICT does not consider this an acceptable position to meet the containment design objectives.
Original plant design, not design change process.
Original plant design, not design change process.
I l
o I
l H                                                                                                                                                       '.
l l
H '.


                                                                          ^
^
CONTAINMENT PENETRATIONS (CONT)
CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 1. EXAMPLE 2 CAUSE:
APPARENT VIOLATION 1. EXAMPLE 2 CAUSE:
e    Failure to look beyond the requirements of the USAR to identify the appropriate design requirements for these containment penetrations.
Failure to look beyond the requirements of the USAR to identify the appropriate design e
requirements for these containment penetrations.
CORRECTIVE ACTION:
CORRECTIVE ACTION:
e   Review each penetration to ensure safety function can be achieved and resolve discrepancies.
e Review each penetration to ensure safety function can be achieved and resolve discrepancies.
e    Expedite design basis reconstitution.
Expedite design basis reconstitution.
l l
e l
H    -25 .
l H
-25.


                                                                                                                  }
}
CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 2 CORRECTIVE ACTION (S)                                                 STATUS CAUSES:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 2 CORRECTIVE ACTION (S)
STATUS CAUSES:
FAILURE TO LOOK BEYOND THE REQUIREMENTS OF THE USAR TO IDENTIFY THE APPROPRIATE DESIGN REQUIREMENTS FOR THESE CONTAINMENT PENETRATIONS.
FAILURE TO LOOK BEYOND THE REQUIREMENTS OF THE USAR TO IDENTIFY THE APPROPRIATE DESIGN REQUIREMENTS FOR THESE CONTAINMENT PENETRATIONS.
ACTIONS:
ACTIONS:
Resolve primary containment penetration configuration     Complete; problems identified as part of the Primary and Appendix J problems: ensure compliance to the         Containment walkdown have been resolved by design design / licensing basis and Appendix J.                 or testing program changes. Primary Containment manual valves and caps have been marked to be readily identifiable in the plant and are controlled in Procedure 2.0.2.
Resolve primary containment penetration configuration Complete; problems identified as part of the Primary and Appendix J problems: ensure compliance to the Containment walkdown have been resolved by design design / licensing basis and Appendix J.
Review containment penetration configurations to         Complete; review performed from walkdown findings, ensure that the safety functions as assumed in the       and design changes implemented as required.
or testing program changes. Primary Containment manual valves and caps have been marked to be readily identifiable in the plant and are controlled in Procedure 2.0.2.
Review containment penetration configurations to Complete; review performed from walkdown findings, ensure that the safety functions as assumed in the and design changes implemented as required.
safety analysis can be provided by the as-built penetrations.
safety analysis can be provided by the as-built penetrations.
Accelerate the Design Basis Reconstitution effort with   System prioritization complete. Bids being evaluated ria significant safety systems given priority.           for expedited DCDs.
Accelerate the Design Basis Reconstitution effort with System prioritization complete. Bids being evaluated ria significant safety systems given priority.
for expedited DCDs.
H
H
* CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 3 APPARENT VIOLATION:
* CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 3 APPARENT VIOLATION:
Line 883: Line 1,081:
The failure to design, fabricate, and erect the containment isolation barriers to quality standards that reflect the importance of the safety function was identified as an apparent violation of 10 CFR 50, Appendix B, Criterion Ill.
The failure to design, fabricate, and erect the containment isolation barriers to quality standards that reflect the importance of the safety function was identified as an apparent violation of 10 CFR 50, Appendix B, Criterion Ill.
DISCUSSION:
DISCUSSION:
* 46 penetrations where piping was classified lilN, IVP or indeterminant.
46 penetrations where piping was classified lilN, IVP or indeterminant.
* The 46 penetrations involved 262 socket welds and 35 butt welds (297 total).
The 46 penetrations involved 262 socket welds and 35 butt welds (297 total).
H                                                                                                               .
H.


                                ~
~
                            ;. t
t w
                    .                    . c.                                         w  ,
c.
i                       CONTAINMENT PENETRATIONS (CONT)
i CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 1. EXAMPLE 3 SAFETY SIGNIFICANCE:
APPARENT VIOLATION 1. EXAMPLE 3 SAFETY SIGNIFICANCE:
* All 262 socket welds passed liquid penetrant examination.
All 262 socket welds passed liquid penetrant examination.
5 of the 35 butt welds showed rejectable indications, but were analyzed and determined to have been acceptable.
5 of the 35 butt welds showed rejectable indications, but were analyzed and e
determined to have been acceptable.
The District did repair or remove each of these welds.
The District did repair or remove each of these welds.
* Results of the NDE verified that the as-found condition of piping was acceptable.
Results of the NDE verified that the as-found condition of piping was acceptable.
REGULATORY SIGNIFICANCE:
REGULATORY SIGNIFICANCE:
* Adverse condition existed for significant amount of time.
Adverse condition existed for significant amount of time.
H
H
* a    9                                                                                                                                               .a e, CONTAINMENT PENETRATIONS (CONT)
* 9
.a e,
a CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 1. EXAMPLE 3 MITIGATING FACTORS:
APPARENT VIOLATION 1. EXAMPLE 3 MITIGATING FACTORS:
e    identified by the District as a result of broad corrective actions taken in response to IR 93-17 violation.
identified by the District as a result of broad corrective actions taken in response to IR e
e    Review of piping classification resulted from expanding the issue to ensure it was bounded.
93-17 violation.
e   Misclassification, not a hardware concern.
Review of piping classification resulted from expanding the issue to ensure it was e
e    Caused by original design, not introduced through design change process.
bounded.
CAUSE:
e Misclassification, not a hardware concern.
e    Focus on system function over containment function resulted in original design error.
Caused by original design, not introduced through design change process.
H                                                                               _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _
e CAUSE:
Focus on system function over containment function resulted in original design error.
e H -


CONTAINMENT PENETRATIONS (CONT)
CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 1. EXAMPLE 3 CORRECTIVE ACTION:
APPARENT VIOLATION 1. EXAMPLE 3 CORRECTIVE ACTION:
Reviewed each containment penetration to ensure proper classification.
Reviewed each containment penetration to ensure proper classification.
e Reviewing ASME Section XI classification boundaries to identify any similar problems.
e Reviewing ASME Section XI classification boundaries to identify any similar problems.
H                                             -
e H -


CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 3 CORRECTIVE ACTIONS                                                                                                                                                     STATUS CAUSES:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 3 CORRECTIVE ACTIONS STATUS CAUSES:
* FOCUS ON SYSTEM FUNCTION OVER PRIMARY CONTAINMENT FUNCTION FOR AFFECTED PIPING RESULTED IN ORIGINAL DESIGN ERROR OF FAILURE TO TRANSLATE PRIMARY CONTAINMENT DESIGN SPECIFICATIONS INTO THE PIPING SPECIFICATION.
FOCUS ON SYSTEM FUNCTION OVER PRIMARY CONTAINMENT FUNCTION FOR AFFECTED PIPING RESULTED IN ORIGINAL DESIGN ERROR OF FAILURE TO TRANSLATE PRIMARY CONTAINMENT DESIGN SPECIFICATIONS INTO THE PIPING SPECIFICATION.
ACTIONS:
ACTIONS:
* Identify welds in penetration-attached piping for Complete; welds have been identified, construction which original construction NDE was insufficient. NDE performed as required, and design documents updated as applicable in accordance with DC 94-212J.
Identify welds in penetration-attached piping for Complete; welds have been identified, construction which original construction NDE was insufficient.
e   Review ASME Section XI classification                                                                                                                   in progress; a draft Section XI classification boundary boundaries to identify other potential pressure                                                                                                         basis has been developed and is in engineering review.
NDE performed as required, and design documents updated as applicable in accordance with DC 94-212J.
e Review ASME Section XI classification in progress; a draft Section XI classification boundary boundaries to identify other potential pressure basis has been developed and is in engineering review.
boundary classification errors.
boundary classification errors.
H                         _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ .
H.


CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 APPARENT VIOLATION:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 APPARENT VIOLATION:
Line 928: Line 1,132:
The failure to perform Type C Local Leak Rate Tests was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.
The failure to perform Type C Local Leak Rate Tests was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.
DISCUSSION:
DISCUSSION:
e    64 total penetrations identified involving 82 components where Type B OR C LOCAL Leak Rate Testing had not been performed.
64 total penetrations identified involving 82 components where Type B OR C LOCAL e
e    57 penetrations involving 75 valves (Type C).
Leak Rate Testing had not been performed.
e   7 Penetrations involving 7 seals (Type B).
57 penetrations involving 75 valves (Type C).
H                                         .      .
e e
7 Penetrations involving 7 seals (Type B).
H.


i                       ,
i e
e CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 i
e CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 i
SAFETY SIGNIFICANCE:
SAFETY SIGNIFICANCE:
e   Valves 28 of 64 penetrations had caps in addition to a single manual valve.
e Valves 28 of 64 penetrations had caps in addition to a single manual valve.
23 of 64 do not connect directly with containment atmosphere.
23 of 64 do not connect directly with containment atmosphere.
5 of 64 penetrations were TIP lines.
5 of 64 penetrations were TIP lines.
1 OF 64 was post accident sampling.
1 OF 64 was post accident sampling.
As-found LLRTs pass.
As-found LLRTs pass.
!                                            e   Seals 7 of 64 involve passive seals (flanges and sealant compounds).
e Seals 7 of 64 involve passive seals (flanges and sealant compounds).
All passed as-found LLRT testing except for IA-65CV (LATER - SEE EXAMPLE 2).
All passed as-found LLRT testing except for IA-65CV (LATER - SEE EXAMPLE 2).
H _ _ - - - - _ _ _ _ _ - _ _ _ _ _ _ - _ - - -
e H - - - -


                                .                    .                          .  .                                1 . .,                      .                                                                                        .
1 CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 REGULATORY SIGNIFICANCE:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 REGULATORY SIGNIFICANCE:
Violation of 10 CFR 50 Appendix J, Section Ill.D.2 and 3.
* Violation of 10 CFR 50 Appendix J, Section Ill.D.2 and 3.
MITIGATING FACTORS:
MITIGATING FACTORS:
District identified as a result of broad corrective actions taken in response to IR 93-17 Violation.
District identified as a result of broad corrective actions taken in response to IR 93-17 Violation.
* Resulted from expanding issue to bound problem.
Resulted from expanding issue to bound problem.
CAUSE:
CAUSE:
e inadequate monitoring and management of Appendix J Test Program.
inadequate monitoring and management of Appendix J Test Program.
H                                                                                                                                                                                                                                                 .    .
e H.


  ,  ;              i   i     !      . ..                +   -
i i
+
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 CORRECTIVE ACTIONS:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 CORRECTIVE ACTIONS:
Resolved design and testing problems.
Resolved design and testing problems.
l Established Appendix J Program owner and developing Appendix J Program Basis
e l
!      Document.
Established Appendix J Program owner and developing Appendix J Program Basis e
Document.
i l
i l
M
M t
                  .      t      .      s             .                            .      i                       ,
s i
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 l
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 l
1 l
1 l
CORRECTIVE ACTIONS                                               STATUS CAUSES:
CORRECTIVE ACTIONS STATUS CAUSES:
l e     INADEQUATE MONITORING AND l
l l
MANAGEMENT OF APPENDIX J TEST PROGRAM ACTIONS:
e INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM ACTIONS:
Resolve Primary Containment penetration configuration   Complete; problems identified as part of the primary and Appendix J problems; ensure compliance to the       Containment walkdown have been resolved by design design / licensing basis and Appendix J.                 or testing program changes. Primary Containment isolation components which were not previously Type B or Type C tested have been tested as required and added to the Appendix J test program.
Resolve Primary Containment penetration configuration Complete; problems identified as part of the primary and Appendix J problems; ensure compliance to the Containment walkdown have been resolved by design design / licensing basis and Appendix J.
Establish an Appendix J Program Owner.                   In progress; a program owner has been assigned and an Appendix J testing basis document is being prepared.
or testing program changes. Primary Containment isolation components which were not previously Type B or Type C tested have been tested as required and added to the Appendix J test program.
H                                                         ,     .
Establish an Appendix J Program Owner.
In progress; a program owner has been assigned and an Appendix J testing basis document is being prepared.
H,


                                                    .                .      i   i         i.                   ;    .    ;          . -: ,'
i i
i.
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 APPARENT VIOLATION:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 APPARENT VIOLATION:
The total leakage of the Local Leak Rate Tests performed on components previously not tested exceeded the Technical Specification limit for leakage to ensure containment integrity.
The total leakage of the Local Leak Rate Tests performed on components previously not tested exceeded the Technical Specification limit for leakage to ensure containment integrity.
This was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.
This was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.
DISCUSSION:
DISCUSSION:
* Total leakage, excluding lA-65CV less than Technical Specification limit.
Total leakage, excluding lA-65CV less than Technical Specification limit.
* IA-65 CV could not be pressurized in the as-found condition.
IA-65 CV could not be pressurized in the as-found condition.
e    Bench testing could not reproduce the excessive leakage.
Bench testing could not reproduce the excessive leakage.
* Used conservative method to determine estimated leakage.
e Used conservative method to determine estimated leakage.
H   . - - - _ _ _ _ _ _ _ _ _ - - - _ _ _ _ _ _ _ _ _      _      __      _
H. - - -


                  .      .    .      .  . i.i..                       ,
i.i..
                                              /
/
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 SAFETY SIGNIFICANCE:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 SAFETY SIGNIFICANCE:
* Calculated dose to control room and offsite within limits.
Calculated dose to control room and offsite within limits.
* X-22 penetration containing lA-65CV is closed loop inside containment and outside containment; likelihood of large leak concurrent with core damage accident very low (1 E-11).
X-22 penetration containing lA-65CV is closed loop inside containment and outside containment; likelihood of large leak concurrent with core damage accident very low (1 E-11).
* Even assuming a major leak from X-22, doses within limits.
Even assuming a major leak from X-22, doses within limits.
REGULATORY SIGNIFICANCE:
REGULATORY SIGNIFICANCE:
* Condition existed for extended time.
Condition existed for extended time.
* An adequate test program would have discovered and corrected this problem.
An adequate test program would have discovered and corrected this problem.
* The aggregate consequences could have been significant if total leakage had been higher.
The aggregate consequences could have been significant if total leakage had been higher.
t M                                         .
t M.


S
S r
* r         *
- 6 CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 MITIGATING FACTORS:
                                                                                                                                                                                                                                                                                                                                              - 6   ,
District identified as a result of broad corrective actions taken in response to IR 93-17 e
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 MITIGATING FACTORS:
violation.
e                                                          District identified as a result of broad corrective actions taken in response to IR 93-17 violation.
Minimal effects on consequences of an accident while it existed.
* Minimal effects on consequences of an accident while it existed.
CAUSE:
CAUSE:
e                                                        inadequate monitoring and management of Appendix J Program.
inadequate monitoring and management of Appendix J Program.
l CORRECTIVE ACTIONS:
e CORRECTIVE ACTIONS:
e                                                          Resolved containment design and testing problems, including IA-65CV.
l Resolved containment design and testing problems, including IA-65CV.
I e                                                         Established Appendix J Program owner and developing Appendix J program basis
e Established Appendix J Program owner and developing Appendix J program basis I
!                                                                                                                                                                                                                                    document.
e document.
H   _ _ _ - _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ - _ _ _ _ _ _ . - - _ _ _ _ _ _ _ _ - - _ _ - _ - _ - - - _ _ _ _ - - _ - - _ _ _ _ _ _ _ _ _ _ _ - _ _ _ - - - _ - _ _ - _ _ - - _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ - _ _ _ _ _ _ - _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ - - _ _ -
H -


CONTAINMENT PENETRATIONS (CONT)
CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 2. EXAMPLE 2 CORRECTIVE ACTIONS                                                   STATUS CAUSES:
APPARENT VIOLATION 2. EXAMPLE 2 CORRECTIVE ACTIONS STATUS CAUSES:
* INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM.
INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM.
ACTIONS:
ACTIONS:
* Resolve Primary Containment penetration             Complete: problems identified as part of the Primary configuration and Appendix J problems; ensure       Containment walkdown have been resolved by design compliance to the design / licensing basis and       or testing program changes. IA-CV-85CV was Appendix J.                                         replaced and the penetration modified to include two check valves in series. A Type C test was performed on this configuration with satisfactory results.
Resolve Primary Containment penetration Complete: problems identified as part of the Primary configuration and Appendix J problems; ensure Containment walkdown have been resolved by design compliance to the design / licensing basis and or testing program changes. IA-CV-85CV was Appendix J.
* Establish an Appendix J program owner.               In progress; a program owner has been selected and an Appendix J Testing Basis Document is in the course of preparation.
replaced and the penetration modified to include two check valves in series. A Type C test was performed on this configuration with satisfactory results.
H                                                       -
Establish an Appendix J program owner.
* l
In progress; a program owner has been selected and an Appendix J Testing Basis Document is in the course of preparation.
                                                                                                      .                                        .                                                                                  .e .
H -
CONTAINMENT PENETRATIONS
 
                              -                                                        APPARENT VIOLATION 2. EXAMPLE 3 APPARENT VIOLATION:
l
The failure to perform local leak rate testing for several instrument pressure switches was                                                                                                 ,
.e CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 APPARENT VIOLATION:
identified as an apparent violation of Technical Specification 4.7.A.2.f.1.
The failure to perform local leak rate testing for several instrument pressure switches was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.
l l
l l
l                                             DISCUSSION:
l DISCUSSION:
l e      involved 15 pressure instruments normally exposed to containment atmosphere that were valved-out during ILRT performance.
involved 15 pressure instruments normally exposed to containment atmosphere that e
e      These instruments perform containment isolation, ECCS initiation, and SCRAM functions.
l were valved-out during ILRT performance.
These instruments perform containment isolation, ECCS initiation, and SCRAM e
functions.
_ SAFETY SIGNIFICANCE:
_ SAFETY SIGNIFICANCE:
e     Each instrument successfully LLRT tested.
e Each instrument successfully LLRT tested.
e      All perform their safety function at low containment pressure <2 PSIG and would actuate prior to peak accident pressure.
All perform their safety function at low containment pressure <2 PSIG and would e
H   _ _ _ _ _ _ _ _ _ - - - - -  _ _ _ _ _ _ -      __                _ _ _ _ _ _ - . _  _ _  _ _ _ _    _ - - _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _  _ _ _ _ _ _ _ _ _ _ _ _ _ - _ - _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _
actuate prior to peak accident pressure.
H - - - - -


                                      . i     -
i CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 REGULATORY SIGNIFICANCE:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 REGULATORY SIGNIFICANCE:
o Condition existed for extended period.
o   Condition existed for extended period.
MITIGATING FACTORS:
MITIGATING FACTORS:
District identified as a result of broad corrective actions taken in response to IR 93-17 violation.
District identified as a result of broad corrective actions taken in response to IR 93-17 e
e   Resulted from expanding issue to bound the concern.
violation.
The instruments were found to be leak tight and capable of performing their containment boundary and system safety functions.
e Resulted from expanding issue to bound the concern.
The instruments were found to be leak tight and capable of performing their e
containment boundary and system safety functions.
CAUSE:
CAUSE:
* Inadequate monitoring and management of Appendix J Program.
Inadequate monitoring and management of Appendix J Program.
H                                           .   *
H.


                                                                                                  ,  .                                        s .
s CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 CORRECTIVE ACTION:
CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 CORRECTIVE ACTION:
Resolved containment design and testing concerns.
* Resolved containment design and testing concerns.
Established Appendix J Program owner and developing Appendix J Program basis e
e                                Established Appendix J Program owner and developing Appendix J Program basis document.
document.
H   _____________-___ - _-_________ - __-_ __ - _ - __- -- _ _ _ - - -
H -


i                             .                    ..                                                          ..
i CONTAINMENT PENETRATIONS (CONT)
CONTAINMENT PENETRATIONS (CONT)
APPARENT VIOLATION 2. EXAMPLE 3 CORRECTIVE ACTIONS STATUS CAUSES:
APPARENT VIOLATION 2. EXAMPLE 3 CORRECTIVE ACTIONS                                                   STATUS CAUSES:
INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM.
INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM.
ACTIONS:
ACTIONS:
* Resolve Primary Containment penetration             Complete: problems identified as part of the Primary configuration and Appendix J problems: ensure       Containment walkdown have been resolved by design compliance to the design / licensing basis and     or testing program changes. Surveillance Procedure Appendix J.                                         6.3.1.1.2 was implemented to perform local leak rate test on the isolated pressure switches, and requisite testing was completed.
Resolve Primary Containment penetration Complete: problems identified as part of the Primary configuration and Appendix J problems: ensure Containment walkdown have been resolved by design compliance to the design / licensing basis and or testing program changes. Surveillance Procedure Appendix J.
* Establish an Appendix J program owner.             In progress; a program owner has been assigned and an Appendix J testing basis document is being prepared.
6.3.1.1.2 was implemented to perform local leak rate test on the isolated pressure switches, and requisite testing was completed.
H                                                       .   *
Establish an Appendix J program owner.
In progress; a program owner has been assigned and an Appendix J testing basis document is being prepared.
H.


                                          ,                                                                              ~.
~.
CONCLUSION
CONCLUSION The District agrees that the three examples identified as apparent Violation 1 constitute a violation of 10 CFR 50, Appendix B, Criterion 111.
* The District agrees that the three examples identified as apparent Violation 1 constitute a violation of 10 CFR 50, Appendix B, Criterion 111.
The District agrees that the three examples identified as apparent Violation 2 constitute a violation of the Cooper Nuclear Station Technical Specifications.
* The District agrees that the three examples identified as apparent Violation 2 constitute a violation of the Cooper Nuclear Station Technical Specifications.
The District has provided specific technical information for each example that addresses the safety significance and mitigating factors that relate to each violation.
* The District has provided specific technical information for each example that addresses the safety significance and mitigating factors that relate to each violation.
While the District has determined that the specific violations may not have individually affected the health and safety of the public, it is acknowledged that the programmatic issues are significant.
* While the District has determined that the specific violations may not have individually affected the health and safety of the public, it is acknowledged that the programmatic issues are significant.
The District is taking aggressive actions to address the broader issues.
* The District is taking aggressive actions to address the broader issues.
H -
H                                                                             _ _ _ _ _ __  - _ _ - - _ - . _ _ _ _ _ _ - _ _ _ _ _ _ - _ _


TIE-RAP /UNDERVOLTAGE TESTING D. BUMAN H       .
TIE-RAP /UNDERVOLTAGE TESTING D. BUMAN H.
* i                                                               ..- ...
 
CHRONOLOGY OF DG TESTING May 16,1994 TIE-WRAP Discovered on MCC-N (CR 94-155).
i CHRONOLOGY OF DG TESTING May 16,1994 TIE-WRAP Discovered on MCC-N (CR 94-155).
                                                                            -              DG #1 Determined to be Operable (OD 94-52).
DG #1 Determined to be Operable (OD 94-52).
TIE-WRAP Removed.
TIE-WRAP Removed.
May 17,1994 All Other Switchgear inspected.
May 17,1994 All Other Switchgear inspected.
May 23,1994 Discovered Load Shed Not Specifically Tested.
May 23,1994 Discovered Load Shed Not Specifically Tested.
May 25,1994 Discovered SWBP Contacts Not Tested - NOUE Declared May 26,1994 Started LSFT Review of Selected Systems i
May 25,1994 Discovered SWBP Contacts Not Tested - NOUE Declared May 26,1994 Started LSFT Review of Selected Systems i
May 28,1994 Expand Scope of Systems June 3,1994 Completed Review of LSFT June 3,1994 Started Developing TPCNs, PCNs, and Special Procedures to Test Contacts.
May 28,1994 Expand Scope of Systems June 3,1994 Completed Review of LSFT June 3,1994 Started Developing TPCNs, PCNs, and Special Procedures to Test Contacts.
June 10,1994 Commenced Testing June 17-     Discovered Problems With Under-Voltage Trip Devices June 20,1994 June 21-     Performed Troubleshooting of UVTDs June 26,1994 J. e26,1994 Developed Design Change to Replace UVTDs
June 10,1994 Commenced Testing June 17-Discovered Problems With Under-Voltage Trip Devices June 20,1994 June 21-Performed Troubleshooting of UVTDs June 26,1994 J.
;                                                              July 4,1994 Completed Modifications for Under-Voltage Tripping l                                                             July 17,1994 Contact Testing Scope Expanded July 21,1994 Contact Testing issues Closed for DG #1 - NOUE Ends l
e26,1994 Developed Design Change to Replace UVTDs July 4,1994 Completed Modifications for Under-Voltage Tripping l
July 17,1994 Contact Testing Scope Expanded July 21,1994 Contact Testing issues Closed for DG #1 - NOUE Ends l
l l
l l
M       _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ . . _ _ _ _ .          _
l M,


TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARENT VIOLATION 1 Procedure 7.3.2.1 was inadequate in that it failed to provide instructions for the performance of maintenance and testing that would ensure proper operability of the breaker. The failure to provide appropriate instructions for a safety related activity is an apparent violation.
TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARENT VIOLATION 1 Procedure 7.3.2.1 was inadequate in that it failed to provide instructions for the performance of maintenance and testing that would ensure proper operability of the breaker. The failure to provide appropriate instructions for a safety related activity is an apparent violation.
DISCUSSION:
DISCUSSION:
e   The procedure was inadequate.
e The procedure was inadequate.
e    The inadequate procedure adversely affected safety system operability.
The inadequate procedure adversely affected safety system operability.
e   As-found testing in this procedure is not used to meet Technical Specification requirements.
e As-found testing in this procedure is not used to meet Technical Specification e
e    The general maintenance performed in this procedure (i.e., wiping, cleaning, lubrication, etc.) and the subsequent test was not performed to support Technical Specification compliance, therefore, should not be considered preconditioning.
requirements.
e    The failure of post-maintenance testing is acknowledged to directly impact the ability of equipment to perform intended safety function.
The general maintenance performed in this procedure (i.e., wiping, cleaning, e
H                                               "
lubrication, etc.) and the subsequent test was not performed to support Technical Specification compliance, therefore, should not be considered preconditioning.
The failure of post-maintenance testing is acknowledged to directly impact the ability e
of equipment to perform intended safety function.
H "


TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARENT VIOLATION 94-16-01 SAFETY SIGNIFICANCE:
TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARENT VIOLATION 94-16-01 SAFETY SIGNIFICANCE:
e          Although the installed tie-rap defeated the associated undervoltage trip Device (MCC-N), the diesel generator still would have performed its function.
Although the installed tie-rap defeated the associated undervoltage trip Device e
e          Later calculations demonstrate the diesel generators have sufficient capacity to perform their intended safety function with the failure of all undervoltage devices.
(MCC-N), the diesel generator still would have performed its function.
REGULATORY SIGNIFICANCE e          Procedures were inadequate to ensure tie-rap removal and post-maintenance operability.
Later calculations demonstrate the diesel generators have sufficient capacity to e
perform their intended safety function with the failure of all undervoltage devices.
REGULATORY SIGNIFICANCE Procedures were inadequate to ensure tie-rap removal and post-maintenance e
operability.
MITIGATING FACTORS:
MITIGATING FACTORS:
e           Self identified.
e Self identified.
!                        e          CNS personnel were on a parallel path with the NRC regarding extent of condition and potential safety implications.
CNS personnel were on a parallel path with the NRC regarding extent of condition and e
H
potential safety implications.
                                                      ~
~
H - - - - - -


TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARF86T VIOLATION 94-16-01 CAUSE:
TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARF86T VIOLATION 94-16-01 CAUSE:
inadequate maintenance procedure.
inadequate maintenance procedure.
e Inadequate post-maintenance testing.
e Inadequate post-maintenance testing.
CORRECTIVE ACTIONS:
e CORRECTIVE ACTIONS:
e Walkdowns.
e Walkdowns.
* Review of relevant procedures.
Review of relevant procedures.
H                   -
H -
* t                         i                                             s' fe.
 
TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING CORRECTIVE ACTIONS                                                       STATUS CAUSE:
t i
e                       INADEQUATE MAINTENANCE PROCEDURE.
s' fe.
e                       INADEQUATE POST-MAINTENANCE TESTING.
TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING CORRECTIVE ACTIONS STATUS CAUSE:
e INADEQUATE MAINTENANCE PROCEDURE.
e INADEQUATE POST-MAINTENANCE TESTING.
ACTIONS:
ACTIONS:
* Wa!kdowns conducted to verify that no similar                                           complete.
Wa!kdowns conducted to verify that no similar complete.
cable tie installations were in place. (See 7/28/94 letter to NRC, Item 5(e)1; 8/8/94 letter to NRC, Attachment 1, item A.1.).
cable tie installations were in place. (See 7/28/94 letter to NRC, Item 5(e)1; 8/8/94 letter to NRC, Attachment 1, item A.1.).
* Revicew performed of CNS mechanical and                                                 complete.
Revicew performed of CNS mechanical and complete.
aiectrical maintenance procedures; surveillance procedures in chemistry, operations, I&C: as well as the 14.X series l&C procedures, to identify similar procedural deficiencies.
aiectrical maintenance procedures; surveillance procedures in chemistry, operations, I&C: as well as the 14.X series l&C procedures, to identify similar procedural deficiencies.
* Performed a random review of I&C procedures                                             complete.
Performed a random review of I&C procedures complete.
to ensure that appropriate checks are performed when leads are lifted and landed.
to ensure that appropriate checks are performed when leads are lifted and landed.
H   _ _ _ - _ _ _ _ _ _ . _ _ - _ _ _ _ _ - - _ _ _ _ - - - _ - _ _ _ _ _ _ _ _ _ _ - .                    __ -.
H -


TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING (CONT)
TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING (CONT)
CORRECTIVE ACTIONS                                     STATUS   _
CORRECTIVE ACTIONS STATUS ACTIONS (CONT)
ACTIONS (CONT)
Maintenance Work Practice 5.0.4 revised to add Complete.
* Maintenance Work Practice 5.0.4 revised to add     Complete.
guidance to ensure that any impairments, changes, or blocking devices installed during performance have been removed prior to procedure completion.
guidance to ensure that any impairments, changes, or blocking devices installed during performance have been removed prior to procedure completion.
* Maintenance supervisors held meetings with         Complete.
Maintenance supervisors held meetings with Complete.
personnel to reemphasize need for procedural compliance and the need for immediate correction of problems related to incomplete understanding of procedural requirements.
personnel to reemphasize need for procedural compliance and the need for immediate correction of problems related to incomplete understanding of procedural requirements.
H                       ,
H,


            .            .    .                      i ..                                            , .,
i LOAD SHEDDING APPARENT VIOLATION 94-16-02 Technical Specification 4.9.A.1.a requires that a loss of voltage test be performed to demonstrate load shedding from the emergency busses. The failure to perform a surveillance test, as required by the TS, because of inadequate procedures is an apparent violation.
LOAD SHEDDING APPARENT VIOLATION 94-16-02 Technical Specification 4.9.A.1.a requires that a loss of voltage test be performed to demonstrate load shedding from the emergency busses. The failure to perform a surveillance test, as required by the TS, because of inadequate procedures is an apparent violation.
DISCUSSION:
DISCUSSION:
e    The procedure was inadequate.
The procedure was inadequate.
SAFETY SIGNIFICANCE:
e SAFETY SIGNIFICANCE:
e    Testing demonstrated all critical contacts able to perform their safety functions.
Testing demonstrated all critical contacts able to perform their safety functions.
e     Calculations demonstrated if load shedding of non-essential loads did not occur, the diesel generators would have performed their intended safety function.
e Calculations demonstrated if load shedding of non-essential loads did not occur, the e
REGULATORY SIGNIFICANCE
diesel generators would have performed their intended safety function.
* Long-term inadequate testing has regulatory significance.
REGULATORY SIGNIFICANCE Long-term inadequate testing has regulatory significance.
!                                                        M
M i
                                                                                                                                                                                                                      .            i   :                    ,
j LOAD SHEDDING APPARENT VIOI.ATION 94-16-02 MITIGATING FACTORS:
j LOAD SHEDDING APPARENT VIOI.ATION 94-16-02 MITIGATING FACTORS:
e                                            The service water booster pump load shed is only required during torus cooling and RHR testing, which occurs during a low percentage of time.
The service water booster pump load shed is only required during torus cooling and e
e                                            Aggressive actions were taken to identify the extent of the deficiencies.
RHR testing, which occurs during a low percentage of time.
e                                           Components that may not necessarily have been required were conservatively tested.
Aggressive actions were taken to identify the extent of the deficiencies.
e                                           inadequate surveillance testing for the load shedding is another example of a deficient procedure and should not be a separate violation.
e Components that may not necessarily have been required were conservatively tested.
e inadequate surveillance testing for the load shedding is another example of a deficient e
procedure and should not be a separate violation.
CAUSES:
CAUSES:
e                                        inadequate surveillance procedure.
inadequate surveillance procedure.
CORRECTIVE ACTIONS:
e CORRECTIVE ACTIONS:
l
l l
* Multi-disciplined review of OER program.
Multi-disciplined review of OER program.
l e                                       identified and tested critical contacts.
e identified and tested critical contacts.
e                                       Evaluated and/or tested remaining contacts.
e Evaluated and/or tested remaining contacts.
H                                           ,
H,


i             ,    t       .      ,                .            .    ,  ; .. ..-
i t
LOAD SHEDDING CORRECTIVE ACTIONS                                     STATUS CAUSE:
LOAD SHEDDING CORRECTIVE ACTIONS STATUS CAUSE:
INADEQUATE SURVEILLANCE PROCEDURE DID NOT INCORPORATE OER DID NOT FULLY ENVELOPE DESIGN BASIS ACTIONS:
INADEQUATE SURVEILLANCE PROCEDURE DID NOT INCORPORATE OER DID NOT FULLY ENVELOPE DESIGN BASIS ACTIONS:
e    Performed multi-disciplined review of the           Complete.
Performed multi-disciplined review of the Complete.
Operating Experience program. (See 8/8/94 letter to NRC, Att.1, item A.4.B.1.)
e Operating Experience program. (See 8/8/94 letter to NRC, Att.1, item A.4.B.1.)
* Identified and tested critical contacts with         Complete.
Identified and tested critical contacts with Complete.
automatic safety functions. (See 7/28/94 letter to NRC, item 5(d)1: 8/8/94 letter to NRC, Attachment 1, Jtem A.2.)
automatic safety functions. (See 7/28/94 letter to NRC, item 5(d)1: 8/8/94 letter to NRC,, Jtem A.2.)
* Performed evaluation and testing of expanded         Complete.
Performed evaluation and testing of expanded Complete.
scope of contacts. (See 8/8/94 letter to NRC, Attachment 1, item A.2.)
scope of contacts. (See 8/8/94 letter to NRC,, item A.2.)
H                                                     _.       -    _
H.


            ;                      i             .
i LOAD SHEDDING T
LOAD SHEDDING T
CORRECTIVE ACTIONS STATUS ACTIONS:
CORRECTIVE ACTIONS                                             STATUS ACTIONS:
Multi-discipline team has been reviewing past To be completed prior to startup.
* Multi-discipline team has been reviewing past     To be completed prior to startup.
operating experience reviews to determine adequacy. This review includes both external and internal OER. Any safety significant items to be corrected prior to startup.
operating experience reviews to determine adequacy. This review includes both external and internal OER. Any safety significant items to be corrected prior to startup.
l M -ss-                                 ,  .
l M
-ss-


t             .      .                              .                            .                                            .        ~.
t
LOAD SHEDDING CORRECTIVE ACTIONS                                                 STATUS ACTIONS:
~.
implernent provisions to ensure that changes to interim memo issued.
LOAD SHEDDING CORRECTIVE ACTIONS STATUS ACTIONS:
procedures are reviewed for impact on design       Procedure revision due 11/1/94.
implernent provisions to ensure that changes to interim memo issued.
e procedures are reviewed for impact on design Procedure revision due 11/1/94.
input documents. In the interim, the SRG and System Engineering will be instructed to monitor procedure changes for potential impacts to the design basis.
input documents. In the interim, the SRG and System Engineering will be instructed to monitor procedure changes for potential impacts to the design basis.
* Revise engineering calculation procedure 3.4.7     Interim memo issued 8/24/94.
Revise engineering calculation procedure 3.4.7 Interim memo issued 8/24/94.
to include provisions to ensure that design         Procedure revision due 11/1/94.
to include provisions to ensure that design Procedure revision due 11/1/94.
output documents are revised when affected by changes to calculations.
output documents are revised when affected by changes to calculations.
H   _ _ . . __                        __    __                            __    -        _ _ - _      . - _ _ _ _ _ _ _ - . _ _ _ _ . - _ _ - - _ - .
H..


i                     i                                                                                         i LS?AD SHEDDING CORRECTIVE ACTION (S)                                               STATUS ACTIONS (CONT):
i i
* The District initiated a surveillance testing     The validation of the surveillance procedures of the program review that will consist of an             following systems to be completed prior to startup:
i LS?AD SHEDDING CORRECTIVE ACTION (S)
independent in-depth review of CNS procedures to:                                                       ADS CS
STATUS ACTIONS (CONT):
: 1)   Determine if the level of testing is               HPCI adequate.                                           LPCI RPS
The District initiated a surveillance testing The validation of the surveillance procedures of the program review that will consist of an following systems to be completed prior to startup:
: 2)   Verify procedures are in place to perform all required testing.
independent in-depth review of CNS procedures to:
: 3)   Provide recommendations for program         Scheduled for completed 4/95.
ADS CS 1)
Determine if the level of testing is HPCI adequate.
LPCI RPS 2)
Verify procedures are in place to perform all required testing.
3)
Provide recommendations for program Scheduled for completed 4/95.
and/or procedure improvement.
and/or procedure improvement.
H                                                       -
H -


      '                    i                               '
i e,.
                                                                                    .; e,.
LOAD SHEDDING
LOAD SHEDDING
    -x CORRECTIVE ACTIONS                                     STATUS ACTIONS (CONT):
-x CORRECTIVE ACTIONS STATUS ACTIONS (CONT):
* As-found tested 4160 and 480 volt                   complete.
As-found tested 4160 and 480 volt complete.
undervoltage devices in breakers that supply electricalloads directly from emergency busses 1F and 1G. (See 7/28/94 letter to NRC, item 5(c)1.)
undervoltage devices in breakers that supply electricalloads directly from emergency busses 1F and 1G. (See 7/28/94 letter to NRC, item 5(c)1.)
complete.
complete.
* Revised 6.3.4.3 to ensure it adequately demonstrates load shedding and sequential loading of the EDGs
Revised 6.3.4.3 to ensure it adequately demonstrates load shedding and sequential loading of the EDGs Extensive actions taken to provide adequate complete.
* Extensive actions taken to provide adequate         complete.
assurance that logic system functional testing at CNS is adequate. (See 7/28/94 letter to NRC, item 5(g); 8/8/94 letter to NRC, Attachment 1, item A.2.)
assurance that logic system functional testing at CNS is adequate. (See 7/28/94 letter to NRC, item 5(g); 8/8/94 letter to NRC, Attachment 1, item A.2.)
* Comprehensive evaluation of the Electrical         complete.
Comprehensive evaluation of the Electrical complete.
Distribution System performaid to ensure that problems were enveloped. (See 8/8/94 letter to NRC, Attachment 1, item A.4.)
Distribution System performaid to ensure that problems were enveloped. (See 8/8/94 letter to NRC, Attachment 1, item A.4.)
i H
i H
  ~
~ I
I


i         .    .          .                                                                                                                      .
i DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 Technical Specification 3.9.A.1.b requires that both EDGs shall be operable. As a result of the EDGs not being capable of supplying sufficient power for vital electrical loads, the EDGs were not operable because they could not perform their intended design function.
DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 Technical Specification 3.9.A.1.b requires that both EDGs shall be operable. As a result of the EDGs not being capable of supplying sufficient power for vital electrical loads, the EDGs were not operable because they could not perform their intended design function.
DISCUSSION:
DISCUSSION:
* The EDGE would have performed as designed regardless of unreliable UVT devices.
The EDGE would have performed as designed regardless of unreliable UVT devices.
* A failure to properly load shed would not have aggravated the consequences of any other known deficiency.
A failure to properly load shed would not have aggravated the consequences of any other known deficiency.
* Other deficiencies are the mis-adjustment of the 59 relay (IR 93-28) setpoint and the setpoint drift of the 27X3-1G device.
Other deficiencies are the mis-adjustment of the 59 relay (IR 93-28) setpoint and the setpoint drift of the 27X3-1G device.
H                                                           ,  ,
H,


i                                                                                                                                                                                                                                                                                                                 - . . .
i DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 59/27X3 CUMUl_ATIVE EFFECT DG1 DG2 59 Relay setpoint July 93 59 Relay setpoint (End of Outage)
DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 59/27X3 CUMUl_ATIVE EFFECT DG1                   DG2 July 93                                                                                                                                                                                                                                                              -
Improperly raised.
59 Relay setpoint   -
Improperly raised.
59 Relay setpoint (End of Outage)                                                                                                                                                                                                                                                         Improperly raised. Improperly raised.
27X3-1F measured at 27X3-1G measured at 10.48 seconds.
27X3-1F measured at -
9.84 seconds.
27X3-1G measured at 10.48 seconds.         9.84 seconds.
November 93 59 Relay setpoint 59 Relay setpoint corrected.
November 93                                                                                                                                                                                                                                                         -
corrected.
59 Relay setpoint   -
27X3-1F measured at 27X3-1G measured at June 94 10.69 seconds.
59 Relay setpoint corrected.             corrected.
14.46 seconds.
June 94                                                                                                                                                                                                                                                              -
Worst case cumulative effect of the 59 relays and the excessive drift of 27X3-1G precludes an analytical determination that the DG2 output breaker would have automatically closed upon an initiation signal.
27X3-1F measured at -
27X3-1G measured at 10.69 seconds.         14.46 seconds.
* Worst case cumulative effect of the 59 relays and the excessive drift of 27X3-1G precludes an analytical determination that the DG2 output breaker would have automatically closed upon an initiation signal.
DG1 remained unaffected.
DG1 remained unaffected.
DG2 output breaker could have been manually closed in accordance with emergency procedures.
DG2 output breaker could have been manually closed in accordance with emergency procedures.
H   ___ _ _      . _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ - _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ - _ _ _ _ _ _ _ _ - - _ - _ _ _ _ _ _ _ _ _ _ _ _ _ - - _ _ _
H.


x DIESEL GENERATOR OPERABILITY -
x DIESEL GENERATOR OPERABILITY -
APPARENT VIOLATION 94-16-03 l
APPARENT VIOLATION 94-16-03 l
l         SAFETY SIGNIFICANCE:
l SAFETY SIGNIFICANCE:
l l
l TIE-WRAP /UV DEVICE:
TIE-WRAP /UV DEVICE:
l Both diesels were capable of performing their intended safety function even if all non-essential loads remained on the bus (were not load shed).
* Both diesels were capable of performing their intended safety function even if all non-essential loads remained on the bus (were not load shed).
27X3/59 RELAY INTERACTION:
27X3/59 RELAY INTERACTION:
l        e    The cumulative effect of the improper high voltage permissive setpoints and the drift of 27X3-1G, along with all other worst case drifts and timing inaccuracies could have prevented the DG2 output breaker from automatically closing during a DBA from June to November 1993.
The cumulative effect of the improper high voltage permissive setpoints and the drift l
e    EOPs require operators to confirm that DG is operating properly.
e of 27X3-1G, along with all other worst case drifts and timing inaccuracies could have prevented the DG2 output breaker from automatically closing during a DBA from June to November 1993.
o    DG2 output breaker could have been manually closed.
EOPs require operators to confirm that DG is operating properly.
e    The concurrent worst case drift by all relays is extremely unlikely.
e DG2 output breaker could have been manually closed.
o    Voltage permissive relays were properly set in November of 1993.
o The concurrent worst case drift by all relays is extremely unlikely.
e    Successful sequential load test demonstrated the proper function on July 14,1993.
e Voltage permissive relays were properly set in November of 1993.
e     DG1 remained operable.
o Successful sequential load test demonstrated the proper function on July 14,1993.
H                                           .     >
e e
  - _ _ _  ____  _ _ _ _ _m_ _  _ .___m--
DG1 remained operable.
H.
m m--


:                                                                                                                                        . a .,.
. a DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 REGULATORY SIGNIFICANCE:
DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 REGULATORY SIGNIFICANCE:
Need for additional analysis.
* Need for additional analysis.
MITIGATING FACTORS:
MITIGATING FACTORS:
Tie-Wrao Undervoltage issues:
Tie-Wrao Undervoltage issues:
* Self identified.
Self identified.
* Broad and extensive corrective actions already discussed.
Broad and extensive corrective actions already discussed.
27X3/59 Relav Interaction:
27X3/59 Relav Interaction:
* Self identified.
Self identified.
CAUSE:
CAUSE:
* Cause has been addressed in that this violation is the result of previous violations already discussed.
Cause has been addressed in that this violation is the result of previous violations already discussed.
CORRECTIVE ACTIONS:
CORRECTIVE ACTIONS:
* Relay 27X3-1G reset.
Relay 27X3-1G reset.
e   Increased surveillance frequency.
e Increased surveillance frequency.
H             _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ - - _ _ _ _ _ - _ _ - _ _ _ - - _ _ _ . - _ _ _ - _ _ _ _ - -                  -          _        -
H -


c .,   l CONCLUSION
l c.,
* These issues were self identified.
CONCLUSION These issues were self identified.
* The preventative maintenance procedure that installed the tie-rap was deficient.
The preventative maintenance procedure that installed the tie-rap was deficient.
* The load shed surveillance procedure was deficient.
The load shed surveillance procedure was deficient.
* The procedure deficiencies should be considered two examples of the same violation.
The procedure deficiencies should be considered two examples of the same violation.
* The UVT devices failing to trip did not render the diesel generators inoperable.
The UVT devices failing to trip did not render the diesel generators inoperable.
* The interaction between the improperly set 59 device and the drift of the 27X3-1G relay resulted in DG2 operability being indeterminant for the period from July To November 1993.
The interaction between the improperly set 59 device and the drift of the 27X3-1G relay resulted in DG2 operability being indeterminant for the period from July To November 1993.
* The load shed issues and the more recently discovered relay issue are independent.
The load shed issues and the more recently discovered relay issue are independent.
M                                 .     4
M
).
4
\\


3 e
3 e
e I
e I
S K
SKR R
R R A E L
A E
M E
L M
L E     -
L M6 E
R U     5 M     -
E R
G N
U 5
I S
G M
H M6 O J L
N H
C
IS O
J LC I
1l


t                       ,                                                                                                                                          ,
t q
q
s
    ;                                s         ..>                                                      -
... r2 CLOSING REMARKS Violations reinforce the need for strong corrective actions beyond individual issues.
                                                                                                                                                                    . . . ,r2 CLOSING REMARKS Violations reinforce the need for strong corrective actions beyond individual issues.
e Must improve fundamental knowledge and set high standards for staff.
e Must improve fundamental knowledge and set high standards for staff.
e Safety Culture Training.
Safety Culture Training.
Field Coaching Team.
        -      Field Coaching Team.
Focus of management expectations.
* Focus of management expectations.
SORC effectiveness.
SORC effectiveness.
Strong and involved QA.
Strong and involved QA.
        -      Instinctively making correct choices.
Instinctively making correct choices.
Being self-critical.
Being self-critical.
e    Problems are know, priorities and action plans are in place.
Problems are know, priorities and action plans are in place.
e   Positive results to date.
e e
H                                                                                                           .
Positive results to date.
  .-                      - - -    .          _ _ _      ___-____-____m__.____ ____-m._____.___-_______  . _ ___________.__..______. __._ _ ___ _ _ _ _ _ _ .
H m
-m.


I GENERAL OFFICE                         l P.o. Box 499. COLUMBUS. NEBRASKA $8002 0490             !
GENERAL OFFICE P.o. Box 499. COLUMBUS. NEBRASKA $8002 0490
                      =_
' Nebraska Public Power District "TSElE2**
                          ' Nebraska Public Power District                                           "TSElE2**                                   l l
=_
GUY R. HORN                                                                                                                               l
l GUY R. HORN Vice-President. Nuclear
,      Vice-President. Nuclear
{
{
(402) 563 5518                                                                                                                           '
(402) 563 5518 NLS950028 i
NLS950028                                                                                                                     i January 18,1995                                                                                                           ~
January 18,1995
I Director, Office of Enforcement U. S. Nuclear Regulatory Commission Attention: Document Control Desk                                                                                             .!
~
Washington, D.C. 20555                                                                                                         l Gentlemen:
Director, Office of Enforcement U. S. Nuclear Regulatory Commission Attention: Document Control Desk Washington, D.C. 20555 l
Gentlemen:


==Subject:==
==Subject:==
Line 1,318: Line 1,544:


==Reference:==
==Reference:==
Letter from Mr. J. L. Milhoan (USNRC) to Mr. G. R. Horn (NPPD), dated December 12,1994, Notice of Violation and Proposed Imposition of Civil                               !
Letter from Mr. J. L. Milhoan (USNRC) to Mr. G. R. Horn (NPPD), dated December 12,1994, Notice of Violation and Proposed Imposition of Civil Penalties - $300,000 (NRC Inspection Reports 50-298/94-14, 50-298/94-16, and 50-298/94-19).
Penalties - $300,000 (NRC Inspection Reports 50-298/94-14, 50-298/94-16, and 50-298/94-19).
This letter, including Attachments 1 and 2, constitute Nebraska Public Power District's (the District) reply to the referenced Notice of Violation (NOV) and Proposed Imposition of Civil Penalties in accordance with 10 CFR 2.201. Attachment 2 is a certified check in the amount of $300,000, for payment of the civil penalties. Per conversation with Mr. G. F. Sanborn, the submittal date of this response was extended to January 18,1995.
This letter, including Attachments 1 and 2, constitute Nebraska Public Power District's (the District) reply to the referenced Notice of Violation (NOV) and Proposed Imposition of Civil                                   !
The referenced inspection reports document the results of three NRC inspections conducted i
Penalties in accordance with 10 CFR 2.201. Attachment 2 is a certified check in the amount                                     ;
from May 23 through August 12,1994, to specifically review the circumstances regarding: (1) the identification, in May and June,1994, by the Cooper Nuclear Station (CNS) staff of numerous Primary Containment penetrations that were installed in configurations that were contrary to NRC requirements and had never been local leak rate tested, (2) the extent of the conditions causing both Emergency Diesel Generators (EDGs) to be declared inoperable, which had resulted in the declaration of a Notification of Unusual Event and plant shutdown on May 25,1994, and (3) the identification by the CNS staff of numerous hardware deficiencies that resulted in the failure of the Control Room envelope pressurization test on April 11,1994, As discussed in Attachment 1 to this letter, each of the " problems" and violations had common causes relating to NPG management and culture. As you are aware, NPG l
of $300,000, for payment of the civil penalties. Per conversation with Mr. G. F. Sanborn, the                                   !
management changes have been implemented to address these issues. The breadth of personnel changes reflect the District's commitment to incorporating broad industry / p ' L.
submittal date of this response was extended to January 18,1995.
experience and achieving higher performance standards.
The referenced inspection reports document the results of three NRC inspections conducted                                       i from May 23 through August 12,1994, to specifically review the circumstances regarding: (1) the identification, in May and June,1994, by the Cooper Nuclear Station (CNS) staff of numerous Primary Containment penetrations that were installed in configurations that were contrary to NRC requirements and had never been local leak rate tested, (2) the extent of the conditions causing both Emergency Diesel Generators (EDGs) to be declared inoperable, which had resulted in the declaration of a Notification of Unusual Event and plant shutdown on May 25,1994, and (3) the identification by the CNS staff of numerous hardware deficiencies that resulted in the failure of the Control Room envelope pressurization test on April 11,1994, As discussed in Attachment 1 to this letter, each of the " problems" and violations had                                         l common causes relating to NPG management and culture. As you are aware, NPG                                                   l management changes have been implemented to address these issues. The breadth of personnel changes reflect the District's commitment to incorporating broad industry /                                 p ' L.
More specifically, management k
experience and achieving higher performance standards. More specifically, management                                     k oversight of the Condition Reporting Process has been increased to ensure adequate rigor and urgency are applied in the evaluation of non-conforming plant conditions as they are
oversight of the Condition Reporting Process has been increased to ensure adequate rigor and urgency are applied in the evaluation of non-conforming plant conditions as they are
                                      ~
~
9501260300 ~50118                                                                            dwfCAh<I-( A y (f -
dwfCAh<I-( A y (f -
I PDR         ADOCK 05000298
9501260300 ~50118 I
_-.o           -        .              _.
PDR ADOCK 05000298 PDR
PDR
_-.o
                                                      ,gggg               g           g .,     .p ;
,gggg g
g.,
.p ;
r/y;g
r/y;g
_ - - _ .            ==.====                            -          = =                              - - -


l I
==.====
    ' Director, Office of Enforcement                                                                 "
= =
U. S. Nuclear Regulatory Commission January 18, 1995 Page 2 of 3 l
 
' Director, Office of Enforcement U.
S.
Nuclear Regulatory Commission January 18, 1995 Page 2 of 3 l
identified. Also, focused attention is being placed in the review of Operational Experience, a program that is considered key in early identification and timely resolution of potential issues.
identified. Also, focused attention is being placed in the review of Operational Experience, a program that is considered key in early identification and timely resolution of potential issues.
Management communications have been improved through: (a) training for NPG Managers and Supervisors on important management topics including teamwork and communications,
Management communications have been improved through: (a) training for NPG Managers and Supervisors on important management topics including teamwork and communications,
      . (b) daily management meetings to communicate priorities and standards, and to ensure inter-departmental coordination, and (c) implementation ofa revised corrective action program that provides focus on organizational, programmatic and human performance concerns.
. (b) daily management meetings to communicate priorities and standards, and to ensure inter-departmental coordination, and (c) implementation ofa revised corrective action program that provides focus on organizational, programmatic and human performance concerns.
4 In summary, the District has taken, and will continue to take aggressive actions responsive to the management issues that have negatively impacted the NPG safety culture. Steps taken that have resulted in the progress made to date have been significant, and the District believes that the CNS " culture" issue is no longer a factor with regard to the recurrence of these violations. The majority ofissues and corrective actions discussed herein have been addressed in the July 28 and August 8,1994 responses to NRC Confirmatory Action Letters (CAL) dated May 27, June 16, July 1, and August 2,1994; during the September 16,1994 Enforcement Conference; and in the November 7,1994 letter to the NRC. As such, the District has not addressed in this response, any perceived differences of opinion since the cited violations should not have occurred in any event, and since they required significant attention before CNS could be considered ready for restart.
4 In summary, the District has taken, and will continue to take aggressive actions responsive to the management issues that have negatively impacted the NPG safety culture. Steps taken that have resulted in the progress made to date have been significant, and the District believes that the CNS " culture" issue is no longer a factor with regard to the recurrence of these violations. The majority ofissues and corrective actions discussed herein have been addressed in the July 28 and August 8,1994 responses to NRC Confirmatory Action Letters (CAL) dated May 27, June 16, July 1, and August 2,1994; during the September 16,1994 Enforcement Conference; and in the {{letter dated|date=November 7, 1994|text=November 7,1994 letter}} to the NRC. As such, the District has not addressed in this response, any perceived differences of opinion since the cited violations should not have occurred in any event, and since they required significant attention before CNS could be considered ready for restart.
Should you have any questions concerning this matter, please contact my office.
Should you have any questions concerning this matter, please contact my office.
G.   .I
/ e~~
                /rne~~
G.
Vice-       sident - Nuclear Attachments cc:       Regional Administrator USNRC Region IV NRC Resident Inspector Cooper Nuclear Station NPG Distribution
.I rn Vice-sident - Nuclear Attachments cc:
Regional Administrator USNRC Region IV NRC Resident Inspector Cooper Nuclear Station NPG Distribution


s
s Director, Office of Enforcement U.
* Director, Office of Enforcement
S. Nuclear Regulatory Commission January 18,'1995 Page 3 of 3 STATE OF NEBRASKA)
* U. S. Nuclear Regulatory Commission January 18,'1995 Page 3 of 3 STATE OF NEBRASKA)
)
                          )
PLATTE
PLATTE           )
)
G. R. Horn, being first duly sworn, deposes and says that he is an authorized representative of the Nebraska Public Power District, a public corporation and political subdivision of the State of Nebraska; that he is duly authorized to submit this response on behalf of Nebraska Public Power District; and that the statements contained herein are true to the best of his knowledge and belief.
G. R. Horn, being first duly sworn, deposes and says that he is an authorized representative of the Nebraska Public Power District, a public corporation and political subdivision of the State of Nebraska; that he is duly authorized to submit this response on behalf of Nebraska Public Power District; and that the statements contained herein are true to the best of his knowledge and belief.
        ,_  ~m               rL, _
~m rL, _
G. R. Horn Subscribed in my presence and sworn to before me this       Nwday of d d W ,1995.
G. R. Horn Nwday of d d W,1995.
0 M
Subscribed in my presence and sworn to before me this 0
NOTARY PUBLIC                             "$$
M NOTARY PUBLIC
                                                            ., - ==
., -==
 
~
                                    ~
s to NLS950028 Page 1 of16 REPLY TO DECEMBER 12, 1994 NOTICE OF VIOLATION AND PROPOSED IMPOSITION OF CIVIL PENALTIES - EA NOS. 94-164, 94-165, 94-166 COOPER NUCLEAR STATION j
1 s     .
NRC DOCKET NO. 50-298, LICENSE DPR-46 J
Attachment 1                                                                            -
During NRC inspections conducted from May 23 through August 12, 1994, violations of NRC requirements were identified. In accordance with the " General Statement of Policy and Procedures for NRC Enforcement Actions," 10 CFR Part 2, Appendix C, the Nuclear Regulatory Commission proposed civil penalties pursuant to Section 234 of the Atomic Energy Act of 1954, as amended, 42 U.S.C 2282, and 10 CFR 2.201.
to NLS950028 Page 1 of16 REPLY TO DECEMBER 12, 1994 NOTICE OF VIOLATION AND
  ''              PROPOSED IMPOSITION OF CIVIL PENALTIES - EA NOS. 94-164, 94-165, 94-166                 1 COOPER NUCLEAR STATION                                     j NRC DOCKET NO. 50-298, LICENSE DPR-46 J
l During NRC inspections conducted from May 23 through August 12, 1994, violations of NRC requirements were identified. In accordance with the " General Statement of Policy and Procedures for NRC Enforcement Actions," 10 CFR Part 2, Appendix C, the Nuclear Regulatory Commission proposed civil penalties pursuant to Section 234 of the Atomic Energy Act of 1954, as amended, 42 U.S.C 2282, and 10 CFR 2.201.
For each of the violations and " problems," inadequate management performance significantly contributed to the existence or perpetuation of the deficiencies.
For each of the violations and " problems," inadequate management performance significantly contributed to the existence or perpetuation of the deficiencies.
Therefore, management related corrective actions addressed in the cover letter to this response and in other District correspondence to the NRC (i.e., District letters to the NRC dated July 28, 1994 (NLS940001); August 8, 1994 (NLS9400026);
Therefore, management related corrective actions addressed in the cover letter to this response and in other District correspondence to the NRC (i.e., District letters to the NRC dated July 28, 1994 (NLS940001); August 8, 1994 (NLS9400026);
and November 7,       1994 (NLS940111)) should be considered part of the District's corrective actions. For brevity, this corrective action is not restated in each violation response.
and November 7, 1994 (NLS940111)) should be considered part of the District's corrective actions. For brevity, this corrective action is not restated in each violation response.
The part.icular violations and the District's replies are set forth below:
The part.icular violations and the District's replies are set forth below:
PROBLEM AREA A- Primary containment Intecrity Violatigng                                     l I.     Violation A_1                                                                       .
PROBLEM AREA A-Primary containment Intecrity Violatigng I.
1 Violation A.1 contained in Reference 1 cites the following:
Violation A_1 Violation A.1 contained in Reference 1 cites the following:
* Technical Specification 3. 7. A.2.a " Containment Integrityo* states   in o
* Technical Specification 3. 7. A.2.a
parto that
" Containment Integrityo* states in r
* primary containment integrity shall be maintained at all times when the reactor is critical or when the reactor water tengperature is above 212*r and fuel is in the reactor vessel. . . "
o parto that
                    " Technical Specification Rurvelliance Requirement 4. 7.A.2.f.lo " Leak Rate Testingo
* primary containment integrity shall be maintained at all times when the reactor is critical or when the reactor water tengperature is above 212*r and fuel is in the reactor vessel... "
* stateso in parto that *. . . local leak rate tests (LZatTs) shall be performed on the primary containment testable penetrations and isolation valves at a pressure of 58 psig during each reactor shutdown for refuelingo or other convenient intervalso but in no case at inte2vals no greater than two years....       The total acceptable leakage rate for all valves and penetrations other than the NBZVs (main steam isolation valves) is 0.60 La.
" Technical Specification Rurvelliance Requirement 4. 7.A.2.f.lo " Leak Rate Testingo
* states in parto that *... local leak rate tests (LZatTs) shall be o
performed on the primary containment testable penetrations and isolation valves at a pressure of 58 psig during each reactor shutdown for refuelingo or other convenient intervals but in no case at inte2vals no o
greater than two years....
The total acceptable leakage rate for all valves and penetrations other than the NBZVs (main steam isolation valves) is 0.60 La.
* Technical Specification 1.Yo "Burvel11ance frequencyo
* Technical Specification 1.Yo "Burvel11ance frequencyo
* states     o in parto that " performance of a curveillance Requirement within the specified time interval shall constitute congpliance with operability requirements for an LCO   [ limiting condition for operation) unless otherwise required by the specitication.*
* states in parto o
* Contrary to the above, from January 18, 1974: until May 27, 1994, primary containment integrity was not maintained at all times when the reactor was             ;
that " performance of a curveillance Requirement within the specified time interval shall constitute congpliance with operability requirements for an LCO [ limiting condition for operation) unless otherwise required by the specitication.*
critical or when the reactor water tengperature was above 212*r and fuel was           )
* Contrary to the above, from January 18, 1974: until May 27, 1994, primary containment integrity was not maintained at all times when the reactor was critical or when the reactor water tengperature was above 212*r and fuel was
in the reactor vessel in that the Burvelliance Requirement for the local leak rate teating of 82 coanponenta had never been innpienented ae an interval not to exceed two years. As the renuit of testing conducted on June 23, 1994, Isolation Valve ZA-65CV (one of the 82 coagponents) failed the LLRTo resulting in a total leakage value that significantly exceeded the 0.60 La limit.       The 0.60 La limit corresponds to a leakage rate of             ,
)
                                                                                                          \
in the reactor vessel in that the Burvelliance Requirement for the local leak rate teating of 82 coanponenta had never been innpienented ae an interval not to exceed two years. As the renuit of testing conducted on June 23, 1994, Isolation Valve ZA-65CV (one of the 82 coagponents) failed the LLRTo resulting in a total leakage value that significantly exceeded the 0.60 La limit.
5.37 scab (189. 60 scth) . The LLRT failure of Yalve ZA-65CV resulted in a             l total leakage rate that exceeded 17.66 scah (623.57 scth) . *
The 0.60 La limit corresponds to a leakage rate of
\\
5.37 scab (189. 60 scth). The LLRT failure of Yalve ZA-65CV resulted in a total leakage rate that exceeded 17.66 scah (623.57 scth). *


                ~ .                    -.                . .                  .-      .          .-                ..
~.
p f Attachment to NLS950028 l'.
p f Attachment l'.
                    . Page 2 of 16 3
to NLS950028
AAm4mmion or Den 4al to Violation 4
. Page 2 of 16 AAm4mmion or Den 4al to Violation 3
The District admits the violation.
The District admits the violation.
'                                                                                                                                      l Ramanna for Violation The immediate cause for not performing local leak rate testing (LLRTs) on                                 1 82 components is that they had not been previously identified for inclusion in the CNS 10 CFR 50 Appendix J Program. .As discussed in LER                                 l 94-011 Revision 1, the root cause for this failure was lack of management commitment to program implementation, in that the organizational focus for problem identification and resolution was primarily , compliance-based.
4 Ramanna for Violation 1
This resulted in insufficient attention being paid to evolving regulatory issues in this area,             for which a compliance-based standard was                               i inappropriate.
The immediate cause for not performing local leak rate testing (LLRTs) on 82 components is that they had not been previously identified for inclusion in the CNS 10 CFR 50 Appendix J Program..As discussed in LER 94-011 Revision 1, the root cause for this failure was lack of management commitment to program implementation, in that the organizational focus for problem identification and resolution was primarily, compliance-based.
When the CNS Operating License was issue'd (1974), the specific testable Primary Containment penetrations and Primary Containment Isolation Valves (PCIVs) were listed in the CNS Technical Specifications. Eventually, this list was shifted to the Updated Safety Analysis Report (USAR) through a License Amendment. The original licensing basis was that performance of                                   ,
This resulted in insufficient attention being paid to evolving regulatory issues in this area, for which a compliance-based standard was i
these specific tests constituted a method for Appendix J compliance that was acceptable to the Atomic Energy Commission (AEC).                     The mindset was that since the design of many of the CNS systems pre-dated the issuance of Appendix       J   for   public     comment,     adherence     to.       the           Technical Specification /USAR list (clong with other specific commitments that might be made) was all that was required, despite later regulatory positions that contradicted this approach. Although these deficiencies were self-
inappropriate.
* identified as a result of broad corrective action' in : response to Inspection Report 93-17, the District duly acknowledges that this condition should have been recognized and corrected long ago.
When the CNS Operating License was issue'd (1974), the specific testable Primary Containment penetrations and Primary Containment Isolation Valves (PCIVs) were listed in the CNS Technical Specifications. Eventually, this list was shifted to the Updated Safety Analysis Report (USAR) through a License Amendment. The original licensing basis was that performance of these specific tests constituted a method for Appendix J compliance that was acceptable to the Atomic Energy Commission (AEC).
Corrective Stens Taken and the Results Achieved' In addition to the generic NPG culture improvements that address the root cause as previously noted, other more programmatic corrective actions have been taken       As stated in LER 94-011, Revision 1, walkdowns of the Primary Containment penetrations have been performed. This activity contributed to the District's confidence that the scope of the Appendix J . non-compliance has been comprehensively identified.               'See also, Confirmatory Action Letter Response dated July 28, 1994.) .The following courses of action were then followed:
The mindset was that since the design of many of the CNS systems pre-dated the issuance of Appendix J
(1)   As-found testing was performed for penetrations that had not previously been Type A,       B,   or C tested and for which this testing was determined to be immediately practicable. Those that were not tested were either modified and then tested, or were designated as candidates for Appendix J exemption.           The total as-found leak rate for the testable penetrations, except X-22 which contained drywell.
for public
pneumatic supply check valve IA-CV-65CV, was 26 SCFH.                     With regard to penetration X-22, leakage through IA-CV-65CV was significant, preventing pressurization of the penetration using normal leak rate testing apparatus.         Accordingly, worst-case leakage was examined during safety consequence assessments that were performed.
: comment, adherence to.
k Penetration modifications and component maintenance / replacement were performed. Subsequent testing has verified that the total Primary Containment as-found leak rate is               less   than the Technical                       "
the Technical Specification /USAR list (clong with other specific commitments that might be made) was all that was required, despite later regulatory positions that contradicted this approach. Although these deficiencies were self-identified as a result of broad corrective action' in : response to Inspection Report 93-17, the District duly acknowledges that this condition should have been recognized and corrected long ago.
Specification limit.
Corrective Stens Taken and the Results Achieved' In addition to the generic NPG culture improvements that address the root cause as previously noted, other more programmatic corrective actions have been taken As stated in LER 94-011, Revision 1, walkdowns of the Primary Containment penetrations have been performed. This activity contributed to the District's confidence that the scope of the Appendix J. non-compliance has been comprehensively identified.
(2)     Design changes were implemented, which included addition of test connections, installation of welded caps on spare penetrations,
'See also, Confirmatory Action Letter Response dated July 28, 1994.)
.The following courses of action were then followed:
(1)
As-found testing was performed for penetrations that had not previously been Type A, B,
or C tested and for which this testing was determined to be immediately practicable. Those that were not tested were either modified and then tested, or were designated as candidates for Appendix J exemption.
The total as-found leak rate for the testable penetrations, except X-22 which contained drywell.
pneumatic supply check valve IA-CV-65CV, was 26 SCFH.
With regard to penetration X-22, leakage through IA-CV-65CV was significant, preventing pressurization of the penetration using normal leak rate testing apparatus.
Accordingly, worst-case leakage was examined during safety consequence assessments that were performed.
k Penetration modifications and component maintenance / replacement were performed.
Subsequent testing has verified that the total Primary Containment as-found leak rate is less than the Technical Specification limit.
(2)
Design changes were implemented, which included addition of test connections, installation of welded caps on spare penetrations,


9 s   -
9 s
Attachment 1                                                                                  *
to NLS950028 Page 3 of 16 complete reder:ign of some containment isolation barriers, and installation of caps on vents, drain lines and test connections.
.          to NLS950028 Page 3 of 16 complete reder:ign of some containment isolation barriers, and installation of caps on vents, drain lines and test connections.
These design changes have been completed.
These design changes have been completed.
(3)     For penetrations and components that have been deemed impractical to test in accordance with the requirements of Appendix         J, NRC
(3)
* exemptions have been obtained.
For penetrations and components that have been deemed impractical to test in accordance with the requirements of Appendix J,
NRC exemptions have been obtained.
Corrective Stens That Will Be Taken to Avoid Further Violations Appendix J compliance accountability has been improved by redefining
Corrective Stens That Will Be Taken to Avoid Further Violations Appendix J compliance accountability has been improved by redefining
                  " program owner" responsibilities to require the primary duty to be ensuring the integrity of the overall program, rather than merely functioning as a testing facilitator.       To assist in this objective, the current licensing basis for Appendix J testing will be formally captured in an Appendix J testing basis document.         This will provide a readily available, controlled source of comprehensive information to the Appendix J program owner which will facilitate the correct disposition of future Appendix J issues as they occur.
" program owner" responsibilities to require the primary duty to be ensuring the integrity of the overall program, rather than merely functioning as a testing facilitator.
To assist in this objective, the current licensing basis for Appendix J testing will be formally captured in an Appendix J testing basis document.
This will provide a readily available, controlled source of comprehensive information to the Appendix J program owner which will facilitate the correct disposition of future Appendix J issues as they occur.
Late When Full Comnliance Will Be Achieved CNS is now in full compliance with the testing requirements necessary to demonstrate Primary Containment Integrity.
Late When Full Comnliance Will Be Achieved CNS is now in full compliance with the testing requirements necessary to demonstrate Primary Containment Integrity.
II. Violation A.2 Violation A.2 contained in Reference 1 cites the following:
II.
eso cyg page 50, Appendix Bo Criterion no
Violation A.2 Violation A.2 contained in Reference 1 cites the following:
eso cyg page 50, Appendix Bo Criterion n
* Test Control,
* Test Control,
* states, in part, that *(a) test program shall be established to assure tLet all testing required to demonstrate that structureso systease and connponeines will perform satisfactorily in service is identified and perfaxwed in accordance with written test procedures which incorporate the requirements and acceptance listes contained in applicable design documents."
* states, in o
                *CNB Quality Assurance Program for Operation Policy Directives Revision 20, Section 2.11, written to AJnplement the requirements of 10 CFR Part 50o Appendix Bo Criterion n       o  requires that each type of test program performed will be defined by written procedures and instructions, and it requires that acceptance tests will be developed for structures o systems, and congponents to demonstrate their capability to perform satisfactorily following repairs or moditication.
part, that *(a) test program shall be established to assure tLet all testing required to demonstrate that structures systease and connponeines o
                = Contrary to the above the licensee did not assure that all testing was r
will perform satisfactorily in service is identified and perfaxwed in accordance with written test procedures which incorporate the requirements and acceptance listes contained in applicable design documents."
identified and perfozmed in accordance with written test procedures which                   \
*CNB Quality Assurance Program for Operation Policy Directive Revision s
incorporated the requirements and acceptable limits. Specifically as of May 14o 1994, 68 coagponents passing through 54 primary containment penetrations each required to be local leak rate tested in accordance o
20, Section 2.11, written to AJnplement the requirements of 10 CFR Part 50o Appendix Bo Criterion n requires that each type of test program o
performed will be defined by written procedures and instructions, and it requires that acceptance tests will be developed for structures
: systems, o
and congponents to demonstrate their capability to perform satisfactorily following repairs or moditication.
= Contrary to the above the licensee did not assure that all testing was r
identified and perfozmed in accordance with written test procedures which
\\
incorporated the requirements and acceptable limits. Specifically as of May 14o 1994, 68 coagponents passing through 54 primary containment
{
{
I with the requirements of Technical specification surveL11ance Requirement 4.7.A.2.f.1, " Leak Rate Testiago " had not been identified in a procedure as requiring local leak rate testing, as required by CNB Quality Assurance Program for Operation Policy Directive Revision s      20s Bection 2.11. These coagponents had never been local leak rate tested.
penetrations each required to be local leak rate tested in accordance o
I with the requirements of Technical specification surveL11ance Requirement 4.7.A.2.f.1, " Leak Rate Testiago " had not been identified in a procedure as requiring local leak rate testing, as required by CNB Quality Assurance Program for Operation Policy Directive Revision 20s Bection 2.11.
These s
coagponents had never been local leak rate tested.
l
l
* Contrary to the abore   s  the licensee did not assure that all testing was identified and perfonaed in accordance with written test procedures which incorporated the requirements and acceptable lialts. As of June 21, 1994, instrument pressure switches PC-PB-12A, Bo Co and DJ PC-PB-101Ao Bo C, and l               Ds PC-PR-119Ao Bo C, and Dr PC-PB-161 and PC-PT-512A and Bo each required to be local leak rate tested in accordance with the requirements of 1
* Contrary to the abore the licensee did not assure that all testing was s
identified and perfonaed in accordance with written test procedures which incorporated the requirements and acceptable lialts. As of June 21, 1994, instrument pressure switches PC-PB-12A, Bo Co and DJ PC-PB-101Ao Bo C, and l
Ds PC-PR-119Ao Bo C, and Dr PC-PB-161 and PC-PT-512A and Bo each required to be local leak rate tested in accordance with the requirements of


Attachment 1
to NLS950028 Page 4 of 16 i
* to NLS950028 Page 4 of 16 i
Technical specification curveillance Requirennent 4.7.A.2.f.1,
Technical specification curveillance Requirennent 4.7.A.2.f.1, *E,eak Rate Testing,
*E,eak Rate Testing,
* had not been identified in a procedure as requiring local leak rate testing after being isolated from the containment incegrated leak rate testo as required by cars Quality Assurance program for Operations relicy Directive Revision 10, Section 2.11.           These switches had never been local leak rate tested. "                                                       *
* had not been identified in a procedure as requiring local leak rate testing after being isolated from the containment incegrated leak rate testo as required by cars Quality Assurance program for Operations relicy Directive Revision 10, Section 2.11.
,                Admission or Denial to Viciation The District admits the violation.
These switches had never been local leak rate tested. "
Reasons for Violation The causes for not establishing written LLRT procedures for the components listed in the violation are identical to those discussed in response to-Violation A.1. A lack of rigor in the Appendix J program (caused by a compliance based management philosophy) resulted in not identifying all of the components for which Type C LLRTs were practicable, and in isolating components which should have been left unisolated for inclusion'in the Type A ILRT boundary. Had all components within the Appendix J scope been previously identified and properly evaluated, they likely would have been included within this testing control program.             Please refer to the-discussion under Violation A.1 for a more complete review of this issue.
Admission or Denial to Viciation The District admits the violation.
Reasons for Violation The causes for not establishing written LLRT procedures for the components listed in the violation are identical to those discussed in response to-Violation A.1.
A lack of rigor in the Appendix J program (caused by a compliance based management philosophy) resulted in not identifying all of the components for which Type C LLRTs were practicable, and in isolating components which should have been left unisolated for inclusion'in the Type A ILRT boundary. Had all components within the Appendix J scope been previously identified and properly evaluated, they likely would have been included within this testing control program.
Please refer to the-discussion under Violation A.1 for a more complete review of this issue.
Corrective Steos Taken and the Results Achieved The corrective actions discussed for Violation A.1 describe the efforts that have been made to comprehensively identify the additional components that require Appendix J testing. These efforts have been completed, and changes to the CNS Appendix J testing procedures have been made which reflect current licensing basis testing requirements.
Corrective Steos Taken and the Results Achieved The corrective actions discussed for Violation A.1 describe the efforts that have been made to comprehensively identify the additional components that require Appendix J testing. These efforts have been completed, and changes to the CNS Appendix J testing procedures have been made which reflect current licensing basis testing requirements.
Corrective Stens That Will Be Taken to Avoid Further Violations As discussed in the District's response to Violation A.1, a testing basis document is being prepared that will provide a clear connection between the Appendix J requirements, the CNS licensing basis with respect to Appendix J compliance, and the testing procedures that implement the CNS licensing basis.
Corrective Stens That Will Be Taken to Avoid Further Violations As discussed in the District's response to Violation A.1, a testing basis document is being prepared that will provide a clear connection between the Appendix J requirements, the CNS licensing basis with respect to Appendix J compliance, and the testing procedures that implement the CNS licensing basis.
Date When Full comoliance Will Be Achieved CNS is now in full compliance with the requirement to have written procedures that encompass the full scope of the 10CFR50 Appendix J testing program.
Date When Full comoliance Will Be Achieved CNS is now in full compliance with the requirement to have written procedures that encompass the full scope of the 10CFR50 Appendix J testing program.
III. Violation A.3 Violation A.3 contained in Reference 1 cites the following:
III.
                "10 Crn Part 50, Appendix 3, Criterion 111, " Design control," states in parts that *[n]easures shall be estab1Labed to assure that. . .the design basis...fis]     correctly         translated into   specifications, drawings, procedureso and instructions. These measures shall include provisions to assure that appropriate quality standards are specified and included in design documents and that deviations from such standards are controlled. *
Violation A.3 Violation A.3 contained in Reference 1 cites the following:
                " Draft General Design Criterion 53o a measure written to cennply with the requirements of 10 CFR 50, Appendix Bo criterion III, as comunitted to in Appendix F of the tipdated Batety Analysis Report (ETBAR) , states that
"10 Crn Part 50, Appendix 3, Criterion 111, " Design control," states in parts that *[n]easures shall be estab1Labed to assure that...the design basis...fis]
                *[p]enetrations that require closure for the containment function shall be
correctly translated into specifications,
                                      , - , .--      ~           ,                    -
: drawings, procedures and instructions. These measures shall include provisions to o
assure that appropriate quality standards are specified and included in design documents and that deviations from such standards are controlled. *
" Draft General Design Criterion 53o a measure written to cennply with the requirements of 10 CFR 50, Appendix Bo criterion III, as comunitted to in Appendix F of the tipdated Batety Analysis Report (ETBAR), states that
*[p]enetrations that require closure for the containment function shall be
~


l 1
l 1
1 Attachment 1                                                                                ~
~
to NM950028 1
to NM950028 1
Page 5 of16 j
Page 5 of16 j
protected by redundant suiving and associated apparatus.
protected by redundant suiving and associated apparatus.
                        *DrafC General Desiga Criterion 1, as connitted to in AppanM w F of the usAna states that "[t] hose systems and components of reactor facilities which are essential to the prevention of accidents which could effect the           ,
*DrafC General Desiga Criterion 1, as connitted to in AppanM w F of the usAna states that "[t] hose systems and components of reactor facilities which are essential to the prevention of accidents which could effect the
{
{
public health and safety or mitigation of their consequences shall be             *
public health and safety or mitigation of their consequences shall be
                                                                                                            }
}
Adentified and than designed, fabricated, and erected to quality standards
Adentified and than designed, fabricated, and erected to quality standards
                    . that reflect the lalportance of the safety function to be pertossed. *
. that reflect the lalportance of the safety function to be pertossed. *
                        *0eneral Electric Design specification No. 22A1153, " Codes and Zadustrial Standard,
*0eneral Electric Design specification No. 22A1153, " Codes and Zadustrial Standard,
* Revision la states, in Note 3 of the Appendix, that *[pliping, which is an integral part of the primary containment for isolation purposes, shall have at least the same quality and levels of assurance as the primary containment.*
* Revision la states, in Note 3 of the Appendix, that *[pliping, which is an integral part of the primary containment for isolation purposes, shall have at least the same quality and levels of assurance as the primary containment.*
* Contrary to Criterion ZZZ, "the licensee did not assure that the above             '
* Contrary to Criterion ZZZ, "the licensee did not assure that the above design bases were correctly translated into specifications and instructions and did not assure that deviations from quality standards were controlled. Speciticallys a.
design bases were correctly             translated into specifications and instructions and did not assure that deviations from quality standards were controlled. Speciticallys
As of May 14, 1994, numerous primary containment penetrations had no redundant valving.
: a.       As of May 14, 1994, numerous primary containment penetrations had no redundant valving.     These penetrations included, but were not limited to, Penetrations X-21, X-22, X-25, X-298, X-30E/F, X-33E/F, X-209A/B/C/D, and X=218.
These penetrations included, but were not limited to, Penetrations X-21, X-22, X-25, X-298, X-30E/F, X-33E/F, X-209A/B/C/D, and X=218.
: b.       As of February 22, 1994, 10 penetrations consisting of annually operated vents, drains, and test connections and requiring closure for the containment fucction, had a single manual isolation valve for containment isolation as opposed to the required redundant valving and associated apparatus.
b.
: c.       During an intC inspection conducted June 13, 1994, through August 12, 1994,   it was determined that approximately 300 containment penetrations had not been designed, fabricated, or lastalled to the same standards as th'e primary containment because these con lponents had not been correctly classifled as essential. As a result, these penetrations had not been designed, fabricated, or erected to gus11ty standards that reflect the Lagportance of the safety function to be perfo2med (e.g. , some welds were not nondestructively tested, some penetrations were not local leak rate tested, and the penetrations were not treated as safety-related by the licensee *s quality assurance program).*
As of February 22, 1994, 10 penetrations consisting of annually operated vents, drains, and test connections and requiring closure for the containment fucction, had a single manual isolation valve for containment isolation as opposed to the required redundant valving and associated apparatus.
c.
During an intC inspection conducted June 13, 1994, through August 12,
: 1994, it was determined that approximately 300 containment penetrations had not been designed, fabricated, or lastalled to the same standards as th'e primary containment because these con lponents had not been correctly classifled as essential. As a result, these penetrations had not been designed, fabricated, or erected to gus11ty standards that reflect the Lagportance of the safety function to be perfo2med (e.g., some welds were not nondestructively tested, some penetrations were not local leak rate tested, and the penetrations were not treated as safety-related by the licensee *s quality assurance program).*
Arfm( s c ion or Denial to violation The District admits the violation.
Arfm( s c ion or Denial to violation The District admits the violation.
Reasons for Violatign As noted in this Violation, there were two areas of non-conforming Primary Containment penetration design:           (1) the lack of Primary Containment penetration barrier redundancy for all process lines passing through the Primary Containment, and (2) the improper classification and maintenance of many penetrations as non-essential. These areas are discussed in more detail below.
Reasons for Violatign As noted in this Violation, there were two areas of non-conforming Primary Containment penetration design:
(1)     Barrier Redundanev- The cited Primary Containment penetration barrier redundancy discrepancies involve manual valve configurations on penetrations designated for process lines. As noted by the NRC in Enclosure 2 of the NOV, these configurations were part of the original plant design. Specifically, the configurations were built             i to be in conformance with the 1967 Draf t AEC General Design Criteria l                                                                                                           l l                                                                                                            1 i-
(1) the lack of Primary Containment penetration barrier redundancy for all process lines passing through the Primary Containment, and (2) the improper classification and maintenance of many penetrations as non-essential. These areas are discussed in more detail below.
(1)
Barrier Redundanev-The cited Primary Containment penetration barrier redundancy discrepancies involve manual valve configurations on penetrations designated for process lines. As noted by the NRC in Enclosure 2 of the NOV, these configurations were part of the original plant design. Specifically, the configurations were built i
to be in conformance with the 1967 Draf t AEC General Design Criteria l
l 1
i-


r
r
[;                                                                                                     I
[;
:e                                                                                             -l Attachment 1                                                                            -
I
l
: e
      .      to NLS960028 Page 6 a(16 L
-l to NLS960028 Page 6 a(16 L
i (GDC), which did not explicitly require redundancy for process lines isolated by manual valves.       In addition, the response to Final Safety Analysis Report (FSAR) Question 5.5 clearly ider tified the District's position with respect to GDC 55 and 56, and Safety Guide
(GDC), which did not explicitly require redundancy for process lines i
: 11. In response to Question 5.5, the District stated that a single.
isolated by manual valves.
                        . manual valve would be employed for instrument lines and lines to.       * '
In addition, the response to Final Safety Analysis Report (FSAR) Question 5.5 clearly ider tified the District's position with respect to GDC 55 and 56, and Safety Guide 11.
con'crol systems or devices inside the Primary Containment, including pneumatic lines for valves, dampers, etc.       (Regulatory Guide.1.11 still permits the use of single manual valves.for some applications and the GDC still provides for-the acceptability of containment isolation provisions 'on some other defined basis".)
In response to Question 5.5, the District stated that a single.
The CNS SER makes it clear that tho ' AEC's = technical review for'             i initial licensing was performed based .on         10CFR50 Appendix     A'       <
. manual valve would be employed for instrument lines and lines to.
criteria, within which, Criterion 55 . provides more prescriptive               I redundancy requirements.       It is unclear to what degree the AEC
con'crol systems or devices inside the Primary Containment, including pneumatic lines for valves, dampers, etc.
* l reviewed the redundancy issue, but the conclusion was reached in                 !
(Regulatory Guide.1.11 still permits the use of single manual valves.for some applications and the GDC still provides for-the acceptability of containment isolation provisions 'on some other defined basis".)
Section 3.1 of the SER that the plant conformed to the ' intent of the Appendix A criteria.       The failure of the NPG to resolve the ambiguity of the licensing basis was a key factor in. the perpetuation of non-redundant Primary Containment penetration barrier configurations, both in the original . design, and after.
The CNS SER makes it clear that tho ' AEC's = technical review for' i
initial licensing was performed based.on 10CFR50 Appendix A'
criteria, within which, Criterion 55. provides more prescriptive redundancy requirements.
It is unclear to what degree the AEC reviewed the redundancy issue, but the conclusion was reached in Section 3.1 of the SER that the plant conformed to the ' intent of the Appendix A criteria.
The failure of the NPG to resolve the ambiguity of the licensing basis was a key factor in. the perpetuation of non-redundant Primary Containment penetration barrier configurations, both in the original. design, and after.
various design changes.
various design changes.
In two of the cited examples, it is apparent that there was a lack of rigor in maintaining configuration controls. Therefore, _ apart from the licensing basis ambiguities, inappropriate configuration management contributed to the existence of non-redundant; or                     !
In two of the cited examples, it is apparent that there was a lack of rigor in maintaining configuration controls.
unqualified barriers.
Therefore, _ apart from the licensing basis ambiguities, inappropriate configuration management contributed to the existence of non-redundant; or unqualified barriers.
1 (2)   Penetration classification- The penetration misclassifications                   l resulted from an original design error, in that, the requirements of             ;
1 (2)
General Electric Specification 22A1153 . for piping passing through             !
Penetration classification-The penetration misclassifications resulted from an original design error, in that, the requirements of General Electric Specification 22A1153. for piping passing through the Primary Containment were not correctly translated into the piping specifications. The passive function of helping to maintain Primary Containment integrity was not recognized as a safety function for otherwise non-essential piping. -As a result! piping segments were inappropriately procured, fabricated and maintained to the requirements of USAS B31.1, rather than to a level of quality commensurate to that applied for the Primary Containment (as in.USAS B31.7).
the Primary Containment were not correctly translated into the                   '
The impacts of this discrepancy were that in certain instances:
piping specifications. The passive function of helping to maintain Primary Containment integrity was not recognized as a safety function for otherwise non-essential piping. -As a result! piping segments were inappropriately procured, fabricated and maintained to the requirements of USAS B31.1, rather than to a level of quality commensurate to that applied for the Primary Containment (as in.USAS B31.7).     The impacts of this discrepancy were that in certain                 l instances:     (a) material traceability was not maintained as applicable for the piping and components; (b) appropriate non-destructive evaluations (NDE) were not performed on all applicable welds and piping; and (c) applicable non-destructive testing (NDT)             '{
(a) material traceability was not maintained as applicable for the piping and components; (b) appropriate non-destructive evaluations (NDE) were not performed on all applicable welds and piping; and (c) applicable non-destructive testing (NDT)
was not performed on pressure retaining welds.                                   '
'{
Although both of these non-conforming . areas were = elf-identified as a result of design basis reconstitution efforts and broad corrective actions taken in response to Inspection Report 93-17, the District recognizes that these conditions should have been identified and corrected much earlier.
was not performed on pressure retaining welds.
Similar to the previous two violations, the failure to more promptly identify and correct these deficiencies was due in part to a compliance-                 I based focus, such that, undue reliance was placed in the continuing                     !
Although both of these non-conforming. areas were = elf-identified as a result of design basis reconstitution efforts and broad corrective actions taken in response to Inspection Report 93-17, the District recognizes that these conditions should have been identified and corrected much earlier.
adequacy     of the original plant design, based on AEC approval during initial licensing.                                                                       i
Similar to the previous two violations, the failure to more promptly identify and correct these deficiencies was due in part to a compliance-based focus, such that, undue reliance was placed in the continuing adequacy of the original plant design, based on AEC approval during initial licensing.
                                                                                                        .I Corrective Stens Taken and the Results Achieved The District addressed actions regarding barrier redundancy and                     *
.I Corrective Stens Taken and the Results Achieved The District addressed actions regarding barrier redundancy and
(
(
penetration classifications in a letter dated August 8, 1994.               The following is a summary of corrective actions noted in that letter, as well
penetration classifications in a letter dated August 8,
1994.
The following is a summary of corrective actions noted in that letter, as well


Attachment 1                                                                            -  '
to NLS950028 Page 7 of 16 as additional responsive retivities.
to NLS950028 Page 7 of 16 as additional responsive retivities.
(1)   Barrier Redundancv- Walkdowns of Primary Containment penetrations were conducted which verified the as-built barrier configurationa.
(1)
As a result of identified discrepancies associated with inadequate Primary Containment penetration barrier redundancy, design changes     "
Barrier Redundancv-Walkdowns of Primary Containment penetrations were conducted which verified the as-built barrier configurationa.
have been developed and completed which have brought them into conformance. Also, programmatic enhancements have been made to control vent, drain, and test line barrier configurations as discussed in the District's response to Inspection Report 94-03.
As a result of identified discrepancies associated with inadequate Primary Containment penetration barrier redundancy, design changes have been developed and completed which have brought them into conformance.
(2)   Penetration classification- A document review was perfor1ned for all Primary Containment piping and instrument penetrations to determine the scope and extent of the misclassifications.               Welds in penetration-attached process lines, for which original construction NDE was insufficient, were identified. Those that were found to be in non-compliance or indeterminate were subjected to additional NDE.
Also, programmatic enhancements have been made to control vent, drain, and test line barrier configurations as discussed in the District's response to Inspection Report 94-03.
Five welds were found to have rejectable NDE indications and were repaired or replaced as deemed appropriate.           The piping and instrument line segments up to and including the PCIVs have been determined via a Design Change to be of equivalent quality to the Primary Containment, and a reconciliation has been performed between USAS B31.1 and B31.7 for these segments.       These penetrations and components are now treated as Essential IIN, and will be maintained under the District's ASME Section XI Program.
(2)
Corrective stenn That Will Be Taken to Avoid Purther Violations No further directly related corrective steps are planned.           However, as stated during the Enforcement Conference, the two ongoing actions described below help to prevent recurrence of simllar types of violations.
Penetration classification-A document review was perfor1ned for all Primary Containment piping and instrument penetrations to determine the scope and extent of the misclassifications.
(1)   To help identify other licensing basis issues stemming from the original. design, the design basis reconstitution effort is being expedited.
Welds in penetration-attached process lines, for which original construction NDE was insufficient, were identified. Those that were found to be in non-compliance or indeterminate were subjected to additional NDE.
(2)   The ASME Section XI boundaries are being reviewed to identify and resolve other potential pressure boundary classification errors. A Section XI classification boundary basis document is being prepared that identifies the Section XI boundary and defines its bases.
Five welds were found to have rejectable NDE indications and were repaired or replaced as deemed appropriate.
The piping and instrument line segments up to and including the PCIVs have been determined via a Design Change to be of equivalent quality to the Primary Containment, and a reconciliation has been performed between USAS B31.1 and B31.7 for these segments.
These penetrations and components are now treated as Essential IIN, and will be maintained under the District's ASME Section XI Program.
Corrective stenn That Will Be Taken to Avoid Purther Violations No further directly related corrective steps are planned.
However, as stated during the Enforcement Conference, the two ongoing actions described below help to prevent recurrence of simllar types of violations.
(1)
To help identify other licensing basis issues stemming from the original. design, the design basis reconstitution effort is being expedited.
(2)
The ASME Section XI boundaries are being reviewed to identify and resolve other potential pressure boundary classification errors. A Section XI classification boundary basis document is being prepared that identifies the Section XI boundary and defines its bases.
Date When Full comoliance Will Be Achieved CNS is now in full compliance with the requirements for Primary Containment penetration safety classification and PCIV redundancy, as the District understands that the one remaining single-valve PCIV process line is acceptable to the NRC.
Date When Full comoliance Will Be Achieved CNS is now in full compliance with the requirements for Primary Containment penetration safety classification and PCIV redundancy, as the District understands that the one remaining single-valve PCIV process line is acceptable to the NRC.
PROBLEM AREA B- Ooerability of the 490 Volt and 4160 Volt Busen I. Violation B.1 Violation B.1 contained in Reference 1 cites the following:
PROBLEM AREA B-Ooerability of the 490 Volt and 4160 Volt Busen I.
              " Technical Specification     3.9.A.1.c,
Violation B.1 Violation B.1 contained in Reference 1 cites the following:
" Technical Specification 3.9.A.1.c,
* Auxiliary Riectrical Equipments
* Auxiliary Riectrical Equipments
* requires, in part, that the reactor shall not be made critical from a Cold Bhutdown Condition unless the 4160 volt critical buses 1F and 10 and the 480 volt critical buses 1F and 10 are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.
* requires, in part, that the reactor shall not be made critical from a Cold Bhutdown Condition unless the 4160 volt critical buses 1F and 10 and the 480 volt critical buses 1F and 10 are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.
* Technical Bpecification Burveillance Jtequireament 4.9.A.1.a u      "Raergency 1
* Technical Bpecification Burveillance Jtequireament 4.9.A.1.a "Raergency u
1 1
1


f     -.
f to NLS950028 Page 8 of 16 Buses Vadervoltage relays
Attachment 1                                                                          '
* states that *oace every 18 months loss of a
to NLS950028 Page 8 of 16 Buses Vadervoltage relaysa
e voltage on emergency buses is slaulated to demonstrate the load sheading from emergency buses and the automatic start of diesel generators. " USAR Rection 2.2.7.2.1.a
* states that *oace every 18 months     e loss of voltage on emergency buses is slaulated to demonstrate the load sheading from emergency buses and the automatic start of diesel generators. " USAR Rection 2.2.7.2.1.a   r    *Btandby A-C Power       (Diesel Generators) Test Capability,
*Btandby A-C Power (Diesel Generators)
* defines the function of the protective scheme as providing for the clearing the buses of all motor loads excepting supply to the 400
Test r
* voit erstical unit substation.
Capability,
                " Technical specification 1.Yr " surveillance Frequency,= neates, in parta that
* defines the function of the protective scheme as providing for the clearing the buses of all motor loads excepting supply to the 400 voit erstical unit substation.
" Technical specification 1.Yr " surveillance Frequency,= neates, in parta that
* performance of a surveillance Requirement within the specifled time interval shall constitute compliance with operability requirements for an 1,CO tlimiting condition for operation) unless otherwise required by the specification.
* performance of a surveillance Requirement within the specifled time interval shall constitute compliance with operability requirements for an 1,CO tlimiting condition for operation) unless otherwise required by the specification.
                " Contrary to the above, from January 10, 1974, until May 25a 1994o the reactor had been ande critical without 4160 voit critical buses 17 and 10, and 400 voit critical buses 17 and 10 belag operable in that the undervoltage relays associated with several of the electrical loads supplied by these buses had never been tested to demonstrate their operability or upon testing, failed to perfoza their intended function of shedding their respective electrical loads from these buses. '                   ,
" Contrary to the above, from January 10, 1974, until May 25a 1994o the reactor had been ande critical without 4160 voit critical buses 17 and 10, and 400 voit critical buses 17 and 10 belag operable in that the undervoltage relays associated with several of the electrical loads supplied by these buses had never been tested to demonstrate their operability or upon testing, failed to perfoza their intended function of shedding their respective electrical loads from these buses. '
Admission or Denial to Violation The District admits the violation.
Admission or Denial to Violation The District admits the violation.
Reasons for Violation                                                             i l
Reasons for Violation i
The root cause of this violation was the CNS failure to view existing programs and methods with a self-critical and questioning attitude. With respect to fulfilling the surveillance requirements that. demonstrate operability,   this resulted in surveillance procedures that did not fully test the load shedding function.
The root cause of this violation was the CNS failure to view existing programs and methods with a self-critical and questioning attitude. With respect to fulfilling the surveillance requirements that. demonstrate operability, this resulted in surveillance procedures that did not fully i
i This function encompasses the circuit path from the sensing of undervoltage on the 4160 volt and 480 volt busses       1 i
test the load shedding function.
through the opening of the respective circuit breakers on undervoltage.           l The requirement to test this function stemmed from a 1979 License                 {
This function encompasses the circuit path from the sensing of undervoltage on the 4160 volt and 480 volt busses i
Amendment that specifically incorporated this Surveillance Requirement into the CNS Technical Specifications.       The reconciliation performed in 1979 between the load sequence testing procedures and these new requirements was unsatisfactory in that all the required loads were not verified to shed on undervoltage (or loss of voltage), and that the logic system functional testing (LSFT) associated with actuation of the undervoltage relays was not comprehensive.
through the opening of the respective circuit breakers on undervoltage.
Numerous opportunities occurred for earlier identification. Most notably during the design basis reconstitution effort, through NRC information to the industry on Westinghouse DB-50 circuit breakers and deficient safety-related LSFTs, and through an Electrical Distribution System Functional Inspection     (EDSFI)   performed at   CNS. However,   given the NPG organizational focus that was previously in place, these opportunities           !
The requirement to test this function stemmed from a 1979 License
were not  utilized as vehicles for broader programmatic inquiry.                 l Corrective Steos Taken and the Results Achieved several steps were taken to address this violation:
{
(1)   LSFTs for 4160 volt buses IF and 1G, and 480 volt buses IF and 1G         !
Amendment that specifically incorporated this Surveillance Requirement into the CNS Technical Specifications.
were satisfactorily performed.
The reconciliation performed in 1979 between the load sequence testing procedures and these new requirements was unsatisfactory in that all the required loads were not verified to shed on undervoltage (or loss of voltage), and that the logic system functional testing (LSFT) associated with actuation of the undervoltage relays was not comprehensive.
l (2)   The applicable surveillance procedures were revised to verify that the load shedding function occurs as required.
Numerous opportunities occurred for earlier identification. Most notably during the design basis reconstitution effort, through NRC information to the industry on Westinghouse DB-50 circuit breakers and deficient safety-related LSFTs, and through an Electrical Distribution System Functional Inspection (EDSFI) performed at CNS.
: However, given the NPG organizational focus that was previously in place, these opportunities utilized as vehicles for broader programmatic inquiry.
were not Corrective Steos Taken and the Results Achieved several steps were taken to address this violation:
(1)
LSFTs for 4160 volt buses IF and 1G, and 480 volt buses IF and 1G were satisfactorily performed.
(2)
The applicable surveillance procedures were revised to verify that the load shedding function occurs as required.


[' .
['.
          *  '              ~
' Attachment 1
                ' Attachment 1                                                                                     !
~
to NLS950028 Page 9 of 16 (3)         An electrical calculation was performed which demonstrated that even if load shedding of all of the non-essential 480 volt loads failed to occur, the diesel generators would have performed their intended safety function.
to NLS950028 Page 9 of 16 (3)
To correct . the long-term reliability ' issues associated with the load               *
An electrical calculation was performed which demonstrated that even if load shedding of all of the non-essential 480 volt loads failed to occur, the diesel generators would have performed their intended safety function.
                                                                                                                    )
To correct. the long-term reliability ' issues associated with the load
shedding capability ' of ' Westinghouse DB-50 circuit breakers, a Design                   .
)
Change was implemented which resulted in replacement of the undervoltage                   l trip devices with shunt trip devices within those safety-related circuit                   '
shedding capability ' of ' Westinghouse DB-50 circuit breakers, a Design Change was implemented which resulted in replacement of the undervoltage l
breakers that are credited with shedding a non-essential load. Industry                   '
trip devices with shunt trip devices within those safety-related circuit breakers that are credited with shedding a non-essential load.
experience has shown this to be an effective configuration.                               j corrective Steen That Will Be Talren to Avoid FurPhar Violatinne This violation has~ prompted a broader inquiry into the adequacy of the CNS               :
Industry experience has shown this to be an effective configuration.
Surveillance Testing Program. The intent of this effort is to verify that                 !
j corrective Steen That Will Be Talren to Avoid FurPhar Violatinne This violation has~ prompted a broader inquiry into the adequacy of the CNS Surveillance Testing Program. The intent of this effort is to verify that all of the surveillance testing. requirements have been correctly translated into the surveillance procedures.
all of the surveillance testing. requirements have been correctly translated into the surveillance procedures.         This effort is more fully discussed in the corrective action for Violation B.2.                                     ,
This effort is more fully discussed in the corrective action for Violation B.2.
Date when Full comn11ance Will Be Achieved CNS is now in full compliance with the requirements of Technical Specifications 3.9.A.1.c and 4.9.A.1.a.
Date when Full comn11ance Will Be Achieved CNS is now in full compliance with the requirements of Technical Specifications 3.9.A.1.c and 4.9.A.1.a.
II     Violation B.2 violation 8.2 contained in Reference 1 cites the following:
II Violation B.2 violation 8.2 contained in Reference 1 cites the following:
                        *10 CFR Part 50, AppendLJr Bo Criterion XZo " Test Controlo* states La'
*10 CFR Part 50, AppendLJr Bo Criterion XZo " Test Controlo* states La' part, that *[a) - test program shall be established to assure that all testing required to demonstrate that structures, systems and coslponents
* part, that *[a) - test program shall be established to assure that all testing required to demonstrate that structures, systems and coslponents                   ,
{
{
will perfom satisfactorily in service is identified and perfozxned in accordance with written test procedures which Lacorporate the requirements and acceptable limits contained in applicable design documents. ",
will perfom satisfactorily in service is identified and perfozxned in accordance with written test procedures which Lacorporate the requirements and acceptable limits contained in applicable design documents. ",
* Contrary to the above, the licensee did not assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits, specifica11ys                         i t
* Contrary to the above, the licensee did not assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits, specifica11ys i
: a.          During an JatC inspection conducted Nay 23, 1994, through August 12,             ;
t During an JatC inspection conducted Nay 23, 1994, through August 12, a.
1994, Procedure 6.3.4.3, *Requential Zooeding of meergency Diesel Generatorso " Revision 31, which is performed to satisfy Tech
1994, Procedure 6.3.4.3,
* cal             s specification curvelliance Requirement 4.9.A.1.a r *L,oss of Vosk. age Relays,
*Requential Zooeding of meergency Diesel Generators " Revision 31, which is performed to satisfy Tech
* was detemined to be inadequate because it did not assure               {
* cal o
that the emergency diesel generators and critical buses would                   :
s specification curvelliance Requirement 4.9.A.1.a
perform satisfactorily la service la that the procedure did not                   i l
*L,oss of Vosk. age r
contain requirements to verify that the 490-volt supply breakers for safety-related and nonsafety-related loads would shed from their                 i electrical buses within a specifled time, nor did the procedure identify that the contzo1 rod drive gualp motors and statica air                 ,
Relays,
cowressors were required to be shed frcan the electrical bus.                     ;
* was detemined to be inadequate because it did not assure
: b.       During an inspection conducted Nay 23, 1994 through August 12,1994, the JDtC identifled that Procedure     6.3.20.1,
{
* rex Service Brater           .
that the emergency diesel generators and critical buses would perform satisfactorily la service la that the procedure did not i
Booster Pun lp Flow Test and Yalve Operability Testo
l contain requirements to verify that the 490-volt supply breakers for safety-related and nonsafety-related loads would shed from their i
* Revision 27, did           '
electrical buses within a specifled time, nor did the procedure identify that the contzo1 rod drive gualp motors and statica air cowressors were required to be shed frcan the electrical bus.
not provide for the testing of the load shedding feature of the                   .
b.
supply breakers associated with the 4160 voit residual heat removal
During an inspection conducted Nay 23, 1994 through August 12,1994, the JDtC identifled that Procedure 6.3.20.1,
;                                s.rvice -eer boose.t - s."
* rex Service Brater Booster Pun lp Flow Test and Yalve Operability Testo
* Revision 27, did not provide for the testing of the load shedding feature of the supply breakers associated with the 4160 voit residual heat removal s.rvice -eer boose.t - s."
a 4
a 4
k
k


o-   :.:                                                                                    ,
o-to NLS950028 Page 10 of 16 i
Attachment 1
Adm4ssion or Den 4m1 to violation The District admits the violation.
* to NLS950028 Page 10 of 16 i
Egamann for Violation The root cause for not establishing written test procedures that adequately reflect the Technical Specification requirements is attributable to the same NPG cultural issues discussed in Violations A.1 a
  .                Adm4ssion or Den 4m1 to violation The District admits the violation.                                           '
and B.1.
Egamann for Violation                                                         ;
Furthermore, as discussed in Violation B.1, this generic cause manifested itself throught (1)
The root cause for not establishing written test procedures that adequately   reflect   the   Technical   Specification   requirements is attributable to the same NPG cultural issues discussed in Violations A.1     a and B.1. Furthermore, as discussed in Violation B.1, this generic cause manifested itself throught (1)   Not ensuring the incorporation of all load shedding verifications (including associated LSFTs) into the surveillance procedures when   .
Not ensuring the incorporation of all load shedding verifications (including associated LSFTs) into the surveillance procedures when they first became recognized as surveillance requirements.
they first became recognized as surveillance requirements.
(2)
(2)   Failure to recognize and correct the procedural deficiency in a more timely manner, particularly with respect to the opportunities that     ,
Failure to recognize and correct the procedural deficiency in a more timely manner, particularly with respect to the opportunities that occurred that might have prompted such recognition. These included the design basis reconstitution offort, industry operational experience with respect to Westinghouse DB-50 circuit breakers and inadequate LSFTs, and a previous EDSFI.
occurred that might have prompted such recognition. These included the design basis reconstitution offort,       industry operational experience with respect to Westinghouse DB-50 circuit breakers and inadequate LSFTs, and a previous EDSFI.
Corrective Steos Taken and the Results Achieved The surveillance procedures cited in this violation have been revised to reflect appropriate load shed testing. Additionally, as discussed in the District's August 8,
Corrective Steos Taken and the Results Achieved The surveillance procedures cited in this violation have been revised to reflect appropriate load shed testing. Additionally, as discussed in the District's August 8, 1994, response to an NRC Request for Additional Information, the investigation into the deficiencies of Surveillance Procedure   6.3.20.1 prompted a review of the Logic System Functional Testing performed for several key safety systems.           This review has identified significant testing omissions that are being addressed as documented in LER 94-009.
1994, response to an NRC Request for Additional Information, the investigation into the deficiencies of Surveillance Procedure 6.3.20.1 prompted a review of the Logic System Functional Testing performed for several key safety systems.
Corrective Steos That Will Be Taken to Avoid Further Violations CNS is currently verifying that all surveillance requirements contained in the CNS Technical Specifications have been adequately translated into surveillance procedures.       In summary, each Technical Specification surveillance line item is being compared with its analogous implementing procedure to determine exactly how the requirement is met, and whether the procedure is satisfactory. This judgment is being made with reference to various source documents such as elementary diagrams, flow diagrams, the USAR, and Design Criteria Documents, as applicable. Upon completion of this project, CNS will have system packages that fully document compliance with the Technical Specification surveillance requirements.
This review has identified significant testing omissions that are being addressed as documented in LER 94-009.
Date When Full Comollance Will Be Achleved verification that the key safety system surveillance requirements are adequately described by written procedures will be completed prior to startup. As discussed in the CNS Phase 1 Plan, these key systems include the Automatic Depressurization System, Core Spray System, High Pressure Coolant Injection System, Low Pressure Coolant Injection System, Reactor Protection System, Standby Gas Treatment System, Control Room HVAC System, and Reactor Building HVAC System. Verification that appropriate written procedures encompass all surveillance requirements will be achieved by July 31, 1995.
Corrective Steos That Will Be Taken to Avoid Further Violations CNS is currently verifying that all surveillance requirements contained in the CNS Technical Specifications have been adequately translated into surveillance procedures.
In summary, each Technical Specification surveillance line item is being compared with its analogous implementing procedure to determine exactly how the requirement is met, and whether the procedure is satisfactory. This judgment is being made with reference to various source documents such as elementary diagrams, flow diagrams, the USAR, and Design Criteria Documents, as applicable.
Upon completion of this project, CNS will have system packages that fully document compliance with the Technical Specification surveillance requirements.
Date When Full Comollance Will Be Achleved verification that the key safety system surveillance requirements are adequately described by written procedures will be completed prior to startup. As discussed in the CNS Phase 1 Plan, these key systems include the Automatic Depressurization System, Core Spray System, High Pressure Coolant Injection System, Low Pressure Coolant Injection System, Reactor Protection System, Standby Gas Treatment System, Control Room HVAC System, and Reactor Building HVAC System.
Verification that appropriate written procedures encompass all surveillance requirements will be achieved by July 31, 1995.
?
?
PROMLEM AREA C- Onerability of the Control Room hsarcency Filter System
PROMLEM AREA C-Onerability of the Control Room hsarcency Filter System


      '' ~
~
Attachment 1'                                                                          ~
~
to NLS950028 Page 11 of16                                                                             -
to NLS950028 Page 11 of16 I.
I. Violation c 1                                                                     .
Violation c 1 Violation c.1 contained in Reference 1 cites the following:
Violation c.1 contained in Reference 1 cites the following:
*snochnical Specification 3.12.A.1r
                    *snochnical Specification 3.12.A.1r
* Control Room Rmergency Fliter System
* Control Room Rmergency Fliter Systemo
* o states La parts that *...the Control Race Reorgency Fliter system...shall be operable at all times when contain==nt integrity is required.
* states La parts that *. . .the Control Race Reorgency Fliter system. . .shall
*19e Order Confiz1 ming Licensee Commitments on Post-MZ Related Zssuec o dated 01 sly 10, 1981, confisms WrD*s commitment to complete NUxm0-0737,
* be operable at all times when contain==nt integrity is required.
* Clarification of SwZ Action Plan Requirements " Zten ZZZ.D.3.de
                    *19e Order Confiz1 ming Licensee Commitments on Post-MZ Related Zssuec o dated 01 sly 10, 1981, confisms WrD*s commitment to complete NUxm0-0737,
* Control o
* Clarification of SwZ Action Plan Requirements o" Zten ZZZ.D.3.de
Roca Eskitability.
* Control Roca Eskitability.
* Iten ZZZ.D.3.4 involves the review of facility design requirements against the Standard Review Rian.
* Iten ZZZ.D.3.4 involves the review of facility design requirements against the Standard Review Rian.           S'he MRD response to Generic Letter 80-90, dated December 30, 1900, submitted the control vocan habitability evaluation, which stated, in parta "the Cwm control race ventilation system is designed to maintain the control room at about 1/4 in. E 0 r (0.031 kPa) positive pressure by supplying air at a high enough pressure that even when system losses and the booster exhaust fan pressures are accounted for           e  the control room pressure is still posi tive. . . *
S'he MRD response to Generic Letter 80-90, dated December 30, 1900, submitted the control vocan habitability evaluation, which stated, in parta "the Cwm control race ventilation system is designed to maintain the control room at about 1/4 in. E 0 (0.031 kPa) positive pressure by supplying air at a high enough r
                  "A Refety Evaluation Report for the Cooper Station from the Accident Evaluation Branch on NUxEG-0737a Zten No. ZZZ.D 3.de " Control Rocan               l Kabitability,* dated February 24, 1982, RCates in parto that *...the design meets the criteria identified in Item ZZZ.D.3.4 of NUKEG-0737 and is acceptable.
pressure that even when system losses and the booster exhaust fan pressures are accounted for the control room pressure is still e
* Contrary to the abover from atsne 1989 until April 28, 1994, the Control Room Ruergency Filter system was not operable at all times when                     j containment integrity was required in that testing failed to demonstrate that a positive pressure could be maintained in the control room during             \
posi tive... *
l the periodic perfassaance of the control roca envelope pressurisation               !
"A Refety Evaluation Report for the Cooper Station from the Accident Evaluation Branch on NUxEG-0737a Zten No.
test.*
ZZZ.D 3.de
Adm4nelon or Denial to Violation The District admits the violation.                  .
" Control Rocan Kabitability,* dated February 24, 1982, RCates in parto that
Reasons for Violation The circumstances surrounding the prolonged inoperability of the Control           {
*...the design meets the criteria identified in Item ZZZ.D.3.4 of NUKEG-0737 and is acceptable.
Roon Emergency Filter System (CREFS) were provided.to the NRC in LER 94-006. As discussed in this LER, the unrecognized inoperability of CREFS was primarily the result of a plant culture that did not approach operability issues with a self-critical and questioning attitude.           Also contributing to the deficiency was an incomplete understanding of the original system design criteria, which led to unsubstantiated reliance on the adequacy of the perceived licensing basis.             Several opportunities     ;
* Contrary to the above from atsne 1989 until April 28, 1994, the Control r
occurred to address identified deficiencies in the both the design and performance of the system.         These opportunities were missed because of a     !
Room Ruergency Filter system was not operable at all times when j
design basis that was not well defined, inadequate testing, a compliance-           l based approach to operability, and a failure to implement adequate corrective action even though the pressurization test results were                   j marginal. As a result of these collective deficiencies, the system should not have been considered operable.
containment integrity was required in that testing failed to demonstrate
Corrective Stens Taken and the Results Achieved As discussed in LER 94-006, corrective actions have been taken that have restored CREFS to operability.           Specifically, door seals in the Control Room envelope were repaired, penetrations were sealed and the adjacent building ventilation control systems inspected and repaired. Testing was
\\
that a positive pressure could be maintained in the control room during the periodic perfassaance of the control roca envelope pressurisation test.*
Adm4nelon or Denial to Violation The District admits the violation.
Reasons for Violation The circumstances surrounding the prolonged inoperability of the Control
{
Roon Emergency Filter System (CREFS) were provided.to the NRC in LER 94-006.
As discussed in this LER, the unrecognized inoperability of CREFS was primarily the result of a plant culture that did not approach operability issues with a self-critical and questioning attitude.
Also contributing to the deficiency was an incomplete understanding of the original system design criteria, which led to unsubstantiated reliance on the adequacy of the perceived licensing basis.
Several opportunities occurred to address identified deficiencies in the both the design and performance of the system.
These opportunities were missed because of a design basis that was not well defined, inadequate testing, a compliance-based approach to operability, and a failure to implement adequate corrective action even though the pressurization test results were j
marginal. As a result of these collective deficiencies, the system should not have been considered operable.
Corrective Stens Taken and the Results Achieved As discussed in LER 94-006, corrective actions have been taken that have restored CREFS to operability.
Specifically, door seals in the Control Room envelope were repaired, penetrations were sealed and the adjacent building ventilation control systems inspected and repaired. Testing was


    .a.   -
.a.
Attachment 1 to NLS950028 Page 12 of 16 performed that confirmed positive pressurization between the range of
to NLS950028 Page 12 of 16 performed that confirmed positive pressurization between the range of
                    +0.04" to +0.05" wg with respect to atmospheric pressure.
+0.04" to +0.05" wg with respect to atmospheric pressure.
As discussed in the District's July 28, 1994, letter to the NRC regarding CREFS commitments, the following additional corrective' actions have been taken prevent recurrence:                                                   *
As discussed in the District's {{letter dated|date=July 28, 1994|text=July 28, 1994, letter}} to the NRC regarding CREFS commitments, the following additional corrective' actions have been taken prevent recurrence:
(1)   The worst case design basis conditions for Control Room dose has been reassessed, and specific CREFS performance criteria with respect to this scenario has been established and documented.
(1)
(2)   An operability limit of 2 +0.03
The worst case design basis conditions for Control Room dose has been reassessed, and specific CREFS performance criteria with respect to this scenario has been established and documented.
(2)
An operability limit of 2 +0.03
* wg with respect to atmosphere for the control Room envelope has been established, together with an administrative limit of a +0.04" wg (in contrast to the previous a
* wg with respect to atmosphere for the control Room envelope has been established, together with an administrative limit of a +0.04" wg (in contrast to the previous a
                            +0.01' wg acceptance criteria.)       Surveillance testing to these limits is being conducted monthly. In the event the administrative limit is not met, the testing frequency would be increased to once every two weeks. The design basis for the control room envelope continues to be " positive pressure."
+0.01' wg acceptance criteria.)
(3)   A design change has been iglemented that will eliminate the problem of Control Room and Cable Spreading Room pressure balance.
Surveillance testing to these limits is being conducted monthly. In the event the administrative limit is not met, the testing frequency would be increased to once every two weeks.
(4)   To provide additional marg 3n to its established design basis, CREFS has been modified to incretse ventilation flow and pressurization.
The design basis for the control room envelope continues to be " positive pressure."
Currently, the field work has been completed. Final design change closure is awaiting accept ance testing and NRC approval of the District's proposed Technical Specification Amendment for CREFS.
(3)
corrective Stens That Will Be Taken to Avoid Further Violations Upon NRC approval of the Technical Specification Amendment concerning CREFS,   the operability and administrative limits for Control Room pressurization will be increased.
A design change has been iglemented that will eliminate the problem of Control Room and Cable Spreading Room pressure balance.
Date When Full comnliance Will Be Achieved
(4)
* The installation of the CREFS modification has greatly increased the Control Room pressurization capability. However, CREFS flow is now wall in excess of the Technical Specification band of 341 CFM *10%. The system will be returned to operability and full compliance achieved upon NRC approval the higher band proposed by the District as an amendment to the CREFS Technical Specification.
To provide additional marg 3n to its established design basis, CREFS has been modified to incretse ventilation flow and pressurization.
II. Violation c.2 Violation C.2 contained in Reference 1 cites the following:
Currently, the field work has been completed.
                    *10 CFR Part 50, Appendix Be Criterion XZ,
Final design change closure is awaiting accept ance testing and NRC approval of the District's proposed Technical Specification Amendment for CREFS.
* Test Control,* states, in part, that *(a) test program aball be established to assure that all testing required to demonstrate that structures, systems, and coanponents will perfom satisfactorily in service is identified and perfomed in               I accordance with written test procedures which incorporate the requirements         !
corrective Stens That Will Be Taken to Avoid Further Violations Upon NRC approval of the Technical Specification Amendment concerning
and acceptance limits contained in applicable design documents.
: CREFS, the operability and administrative limits for Control Room pressurization will be increased.
                                                                                                      )
Date When Full comnliance Will Be Achieved The installation of the CREFS modification has greatly increased the Control Room pressurization capability. However, CREFS flow is now wall in excess of the Technical Specification band of 341 CFM *10%.
                    *CNS Quality Assurance Program far Operation Policy Directive     r Revision 10, Section 2.11, written to ingpiement the requirements of 10 CFR Part 50, Appendix Bo Criterion XI, requires that each type of test program                 1 perfomed will be defined by written procedures and instructionso and it requires that acceptance tests will be developed for structuresa systems,         j and con \ponents to demonstrate their capability to perfom satisfactorily         i i
The system will be returned to operability and full compliance achieved upon NRC approval the higher band proposed by the District as an amendment to the CREFS Technical Specification.
II.
Violation c.2 Violation C.2 contained in Reference 1 cites the following:
*10 CFR Part 50, Appendix Be Criterion XZ,
* Test Control,* states, in part, that *(a) test program aball be established to assure that all testing required to demonstrate that structures, systems, and coanponents will perfom satisfactorily in service is identified and perfomed in accordance with written test procedures which incorporate the requirements and acceptance limits contained in applicable design documents.
)
*CNS Quality Assurance Program far Operation Policy Directive Revision r
10, Section 2.11, written to ingpiement the requirements of 10 CFR Part 50, Appendix Bo Criterion XI, requires that each type of test program 1
perfomed will be defined by written procedures and instructions and it o
requires that acceptance tests will be developed for structures
: systems, j
a and con \\ponents to demonstrate their capability to perfom satisfactorily i
i


1 I
1
.                                                                                              1
\\
                                                                                                \
i o
i o
* Attachment 1                                                                            -
to NLS950028 Page 13 of 16 following repairs or anodification.
to NLS950028 Page 13 of 16 following repairs or anodification.
                " Contrary to the above, the licensee did not assure that all testing was identifled and perfomed in accordance with written test procedures' which incorporated the requirements and acceptance limits in applicable design documents. Specifically, from June 1989 until June 1994, Rurvelliance
" Contrary to the above, the licensee did not assure that all testing was identifled and perfomed in accordance with written test procedures' which incorporated the requirements and acceptance limits in applicable design documents.
* Procedure 6. 3.17.18e " Control Room Envelope Pressurisation Teste
Specifically, from June 1989 until June 1994, Rurvelliance Procedure 6. 3.17.18e " Control Room Envelope Pressurisation Teste
* Revision do was not aufficiently detailed in that it did not incorporate acceptance limits to assure that the Control Room RImergency Filter Rystan would perform satisfactorily in service and because the procedure did not prohlhit the inappropriate manipulation of pressures in the adjoining buildings as a precondition for conducClon the test."
* Revision do was not aufficiently detailed in that it did not incorporate acceptance limits to assure that the Control Room RImergency Filter Rystan would perform satisfactorily in service and because the procedure did not prohlhit the inappropriate manipulation of pressures in the adjoining buildings as a precondition for conducClon the test."
Admission or Denial to Violation The District admits the violation.
Admission or Denial to Violation The District admits the violation.
Reasons for Violation The root cause of this violation was the CNS failure to view existing programs and methods with a self-critical and questioning attitude. With respect to the subject of this violation, a surveillance procedure resulted in inadequate guidance and acceptance criteria for CREFS operability.
Reasons for Violation The root cause of this violation was the CNS failure to view existing programs and methods with a self-critical and questioning attitude. With respect to the subject of this violation, a surveillance procedure resulted in inadequate guidance and acceptance criteria for CREFS operability.
In addition to the cultural issues that provided the general climate for this violation to occur, the CNS design and regulatory history of CREFS resulted in an inconsistent understanding of what the exact relationship was between positive Control Room pressurization and CREFS operability.
In addition to the cultural issues that provided the general climate for this violation to occur, the CNS design and regulatory history of CREFS resulted in an inconsistent understanding of what the exact relationship was between positive Control Room pressurization and CREFS operability.
Pressurization was part of the origin:sl system licensing basis (albeit vaguely defined), but had net been specifically included as a surveillance requirement in the CNS Technical Specifications. Given the compliance-oriented focus chat was prevalent at the time, this ambiguity resulted in a surveillance procedure that required only nominal pressurization.
Pressurization was part of the origin:sl system licensing basis (albeit vaguely defined), but had net been specifically included as a surveillance requirement in the CNS Technical Specifications.
Given the compliance-oriented focus chat was prevalent at the time, this ambiguity resulted in a surveillance procedure that required only nominal pressurization.
Moreover, testing conditions were ill-defined, in that, the required pressures of areas outside the Control Room envelope during the test were not specific.
Moreover, testing conditions were ill-defined, in that, the required pressures of areas outside the Control Room envelope during the test were not specific.
Corrective Stens Taken and the Results Achieved The District previously addressed several corrective actions in the CAL response dated July 28, 1994     Also as discussed in the corrective actions for Violation C.1, the worst case design basis conditions for Control Room dose has been reassessed, and specific CREFS performance criteria with respect to this scenario has been established and documented.
Corrective Stens Taken and the Results Achieved The District previously addressed several corrective actions in the CAL response dated July 28, 1994 Also as discussed in the corrective actions for Violation C.1, the worst case design basis conditions for Control Room dose has been reassessed, and specific CREFS performance criteria with respect to this scenario has been established and documented.
Surveillance Procedure 6.3.17.18 has been revised to define acceptance criteria reflecting the design basis performance requirements, and to specify the testing conditions required for areas bounding the Control Room envelope.
Surveillance Procedure 6.3.17.18 has been revised to define acceptance criteria reflecting the design basis performance requirements, and to specify the testing conditions required for areas bounding the Control Room envelope.
An amendment to the CNS Technical Specifications has been submitted to the NRC to include demonstration of positive Control Room pressurization to the surveillance requirements of CREFS.
An amendment to the CNS Technical Specifications has been submitted to the NRC to include demonstration of positive Control Room pressurization to the surveillance requirements of CREFS.
Corrective stens That Will Be Taken to Avoid Further Violations This   violation represents a deficiency in the Surveillance Testing Program. As discussed in Violation B.2, a comprehensive effort has been undertaken to verify that the surveillance requirements of the CNS Technical Specifications (as well as other license requirements that impact operability) have been adequately translated into surveillance
Corrective stens That Will Be Taken to Avoid Further Violations This violation represents a deficiency in the Surveillance Testing Program. As discussed in Violation B.2, a comprehensive effort has been undertaken to verify that the surveillance requirements of the CNS Technical Specifications (as well as other license requirements that impact operability) have been adequately translated into surveillance
: e.
: e.
* Attachment 1
i to NLS950028 -
* i to NLS950028 -
Page 14 of 16 procedures.
Page 14 of 16 procedures.
Date When Full comnliance Will Ee Achieved As discussed in Violation B.2, verification that the key safety system surveillance requirements are adequately described by written procedures
Date When Full comnliance Will Ee Achieved As discussed in Violation B.2, verification that the key safety system surveillance requirements are adequately described by written procedures will be completed prior to startup. Verification of full compliance with having written procedures that encompass all surveillance requirements will be completed by July 31, 1995.
* will be completed prior to startup. Verification of full compliance with having written procedures that encompass all surveillance requirements will be completed by July 31, 1995.                                                 l l
Violations Not Assessed A civil Penaltv Section II.A contained in Keference 1 states the following:
Violations Not Assessed A civil Penaltv                                                     I Section II.A contained in Keference 1 states the following:
*10 CFR Part 50, Appendix B,
        *10 CFR Part 50,       Appendix B, criterion V, " Instructions, Procedures and             l Drawingso
criterion V,
* states, in parts that * [s)ctivities affecting qus11ty shall be               '
" Instructions, Procedures and l
Drawings
* states, in parts that * [s)ctivities affecting qus11ty shall be o
prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances and shall be accoanplished in accordance with these instructions, procedures, or drawings.
prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances and shall be accoanplished in accordance with these instructions, procedures, or drawings.
        *sngineering Procedure 3.8,
*sngineering Procedure 3.8,
* Drawing Control Procedure r
* Drawing Control Procedure
* Revision 7, written, in parta to Lagplament 10 CFR Part 50 Appendix Bo Criterion Vo requires that safety-           i related drawings be included on the safety-related drawing list."
* Revision 7, written, in r
A. Violation 1
parta to Lagplament 10 CFR Part 50 Appendix Bo Criterion Vo requires that safety-i related drawings be included on the safety-related drawing list."
* Contrary to the above, during an NRC inspection conducted June 13, 1994, through August 12,     1994, it was detersnined that safety-related flow           1 Diagram No. 2028o " Reactor Building and Drywell Equipament Drain Systemo
A.
* Revision N27a was not included on the safety-related drawing list. As a result of this determination, the licensee subsequently identifled 13 other drawings containing safety-related coagponents that were not included on the safety-related drawing list. "                                               l Artm4 s sion or Denial to Violation The District admits that deficiencies existed in the safety-related list and that 14 drawings were identified that did not have appropriate safety-related components identified.
Violation 1
Reasons For The V3 elation The ' safety-related list" was initially developed in 1985, according to the premise that it would include the drawings of those systems that had recognized safety and plant availability functions. The purpose of this was to ensure that quality-affecting activities would only be performed with reference to final Status 1 drawings (As-built, certified as constructed, Certified, or Certified final by vendor and signed), as oppcsed to Archival (Status 2) or Construction (Status 3) drawings. The list was established as an interim measure until more programmatic changes were completed. Accordingly, Procedure 3.8 was revised to define the three Status Categories, and to proceduralize the requirement that the user ensure that safety-related activities involve only Status 1 drawings, s
* Contrary to the above, during an NRC inspection conducted June 13, 1994, through August 12, 1994, it was detersnined that safety-related flow Diagram No. 2028o " Reactor Building and Drywell Equipament Drain System
* o Revision N27a was not included on the safety-related drawing list. As a result of this determination, the licensee subsequently identifled 13 other drawings containing safety-related coagponents that were not included on the safety-related drawing list. "
Artm4 s sion or Denial to Violation The District admits that deficiencies existed in the safety-related list and that 14 drawings were identified that did not have appropriate safety-related components identified.
Reasons For The V3 elation The ' safety-related list" was initially developed in 1985, according to the premise that it would include the drawings of those systems that had recognized safety and plant availability functions. The purpose of this was to ensure that quality-affecting activities would only be performed with reference to final Status 1 drawings (As-built, certified as constructed, Certified, or Certified final by vendor and signed), as oppcsed to Archival (Status 2) or Construction (Status 3) drawings. The list was established as an interim measure until more programmatic changes were completed.
Accordingly, Procedure 3.8 was revised to define the three Status Categories, and to proceduralize the requirement that the user ensure that safety-related activities involve only Status 1 drawings, s
After this was accomplished, the safety-related list had no quality function with regard to this deficiency.
After this was accomplished, the safety-related list had no quality function with regard to this deficiency.
                                                                                                -1 1
-1 In 1986, a drawing verification project was initiated to validate the as-built status of selected Control Room drawings. The scope of this effort was initially confined to drawings contained on the previously identified safety-related list. Between 1986 and 1988, the list was revised numerous times as additional safety-related components were identified, which
In 1986, a drawing verification project was initiated to validate the as-           l built status of selected Control Room drawings. The scope of this effort             l was initially confined to drawings contained on the previously identified safety-related list. Between 1986 and 1988, the list was revised numerous times as additional safety-related components were identified, which


. y O   9 Attachment 1                                                                        .
y O
to NLS950028 Page 15 of 16 likewise affected the drawing verification project scope.
9 to NLS950028 Page 15 of 16 likewise affected the drawing verification project scope.
In 1989, a step was added to Procedure 3.8 to provide a formal mechanism for making additions or deletions to the list, which would in turn signal the Configuration Management Group of additional drawings that should be screened for as-built verification.
In 1989, a step was added to Procedure 3.8 to provide a formal mechanism for making additions or deletions to the list, which would in turn signal the Configuration Management Group of additional drawings that should be screened for as-built verification.
* During the above processes, information was not completely transmitted between lists and drawings.
During the above processes, information was not completely transmitted between lists and drawings.
Corrective Actions Taken and the Results Achieved As discussed above, the Safety-Related List currently serves only as a scoping document for as-built drawing verification efforts.       This is a function better served by adequate project scoping instructions than by establishment in the CNS procedures. Accordingly, reference to this set of drawings has been removed from the Procedure 3.8.         The additional drawings that were identified as containing safety-related components are being separately assessed for inclusion in the as-built verification project.
Corrective Actions Taken and the Results Achieved As discussed above, the Safety-Related List currently serves only as a scoping document for as-built drawing verification efforts.
This is a function better served by adequate project scoping instructions than by establishment in the CNS procedures. Accordingly, reference to this set of drawings has been removed from the Procedure 3.8.
The additional drawings that were identified as containing safety-related components are being separately assessed for inclusion in the as-built verification project.
Corrective Steos That Will Be Taken to Avoid Further violations There are no further corrective steps being planned to address this issue.
Corrective Steos That Will Be Taken to Avoid Further violations There are no further corrective steps being planned to address this issue.
Date When Full Comnliance Will Be Achieved CNS is in full compliance with the requirement that activities affecting quality be appropriately prescribed by procedures, with respect to the activities described by CNS Procedure 3.8.
Date When Full Comnliance Will Be Achieved CNS is in full compliance with the requirement that activities affecting quality be appropriately prescribed by procedures, with respect to the activities described by CNS Procedure 3.8.
B. Violation 2
B.
* Contrary to the abover during an JatC inspection conducted Nay 23, 1994, through August 12, 1994, Maintenance Procedure 7*.3 2.1o *DB-25 and DB-50 Circuit Breakers - Betting, Testing, and Maintenance (With Astptectors), "
Violation 2
Jtevision 3, was determined to be inappropriate to the circumstances in that the procedure did not contain a requirement to remove tie-wraps from the subject breakers following preventive maintenance r          nor did the procedure provide for ccunprehensive post-maintenance testing of all circuit breaker functions following the connpletion of preventive maintenance."
* Contrary to the above during an JatC inspection conducted Nay 23, 1994, r
through August 12, 1994, Maintenance Procedure 7*.3 2.1o *DB-25 and DB-50 Circuit Breakers - Betting, Testing, and Maintenance (With Astptectors), "
Jtevision 3, was determined to be inappropriate to the circumstances in that the procedure did not contain a requirement to remove tie-wraps from the subject breakers following preventive maintenance nor did the r
procedure provide for ccunprehensive post-maintenance testing of all circuit breaker functions following the connpletion of preventive maintenance."
Admission or Denial to Violation The District admits the violation.
Admission or Denial to Violation The District admits the violation.
Reasons for Violation This violation resulted from the discovery on May 16, 1994 that a tie-wrap was installed on the undervoltage trip device of the feeder breaker to MCC-N. Subsequent investigations revealed that the tie-wrap was installed as allowed during the performance of Maintenance Procedure 7.3.2.1. This procedure   was found to have no explicit requirements for removing the tie-wrap, or for post-maintenance testing that would identify such discrepant conditions.
Reasons for Violation This violation resulted from the discovery on May 16, 1994 that a tie-wrap was installed on the undervoltage trip device of the feeder breaker to MCC-N.
As stated in the District's July 28, 1994 response to Confirmatory Action Letter 4-94-06b, the root cause of the event was the f ailure of management to ensure that requirements for configuration control were adequately implemented into the maintenance procedure. Management's expectations
Subsequent investigations revealed that the tie-wrap was installed as allowed during the performance of Maintenance Procedure 7.3.2.1.
This procedure was found to have no explicit requirements for removing the tie-or for post-maintenance testing that would identify such discrepant
: wrap, conditions.
As stated in the District's July 28, 1994 response to Confirmatory Action Letter 4-94-06b, the root cause of the event was the f ailure of management to ensure that requirements for configuration control were adequately implemented into the maintenance procedure.
Management's expectations


      -a
-a
.o         ,
.o to NLS950028 Page 16 of 16 were not clearly communicated and effected through the procedure review and approval process. As a result, a requirement to retrove the tie-wrap was not included at the conclusion of the procedural section.
Attachment 1                                                                        '
A contributing factor to the procedural omission was the inappropriate assumption that such restoration steps were within the " skill of the craf t," and as such, did not require specific articulation. In this case, it is clear that restoration steps should have been provided.
to NLS950028 Page 16 of 16 were not clearly communicated and effected through the procedure review and approval process. As a result, a requirement to retrove the tie-wrap was not included at the conclusion of the procedural section.
A contributing factor to the procedural omission was the inappropriate assumption that such restoration steps were within the " skill of the       -
craf t," and as such, did not require specific articulation. In this case, it is clear that restoration steps should have been provided.
corrective Stens Taken and the Results Achieved As previously discussed in the CAL response dated July 28, 1994, the following steps have been taken to correct the immediate condition:
corrective Stens Taken and the Results Achieved As previously discussed in the CAL response dated July 28, 1994, the following steps have been taken to correct the immediate condition:
(1)   Plant walkdowns have been performed that have verified that no other tie-wraps or other blocking devices were installed on any of the 480 volt breakers on 480 volt busses lA, 1B, lE, 1F, and 1G.
(1)
                    '')   A review was conducted of station procedures covering electrical and mechanical maintenance to determine if similar ambiguities existed with regard to blocking device removal.       This resulted in 18 procedure changes. A similar review was performed for procedures controlled by the Operations, I&C, Engineering, and Radiological Departments, which likewise resulted in a number of procedure changes.
Plant walkdowns have been performed that have verified that no other tie-wraps or other blocking devices were installed on any of the 480 volt breakers on 480 volt busses lA, 1B, lE, 1F, and 1G.
(3)   A revision has been made to Maintenance Work Practice (MWP) 5.0.4 to add guidance that any impairments, changes or blocking devices installed during the performance of maintenance activities have been removed prior to completion of the procedure.
'')
(4)   Maintenance supervision has communicated to their departments the need for procedural     compliance and immediate correction of procedural problems* and/or incomplete understanding of procedure requirements.
A review was conducted of station procedures covering electrical and mechanical maintenance to determine if similar ambiguities existed with regard to blocking device removal.
porrective Steos That Will Be Taken to Avoid Further Violations The District is committed to broad-based action to achieve excellence in Configuration Management, as discussed in the NPG Per formance Improvement Plans. These actions, in addition to the corrective actions described above will prevent further similar violations.
This resulted in 18 procedure changes.
A similar review was performed for procedures controlled by the Operations, I&C, Engineering, and Radiological Departments, which likewise resulted in a number of procedure changes.
(3)
A revision has been made to Maintenance Work Practice (MWP) 5.0.4 to add guidance that any impairments, changes or blocking devices installed during the performance of maintenance activities have been removed prior to completion of the procedure.
(4)
Maintenance supervision has communicated to their departments the need for procedural compliance and immediate correction of procedural problems and/or incomplete understanding of procedure requirements.
porrective Steos That Will Be Taken to Avoid Further Violations The District is committed to broad-based action to achieve excellence in Configuration Management, as discussed in the NPG Per formance Improvement Plans.
These actions, in addition to the corrective actions described above will prevent further similar violations.
Date When Full Comnliance Will Be Achieved CNS is now in full compliance with the requirement that activities affecting quality be appropriately prescribed by procedures, with respect to installation and removal of temporary blocking devices.
Date When Full Comnliance Will Be Achieved CNS is now in full compliance with the requirement that activities affecting quality be appropriately prescribed by procedures, with respect to installation and removal of temporary blocking devices.


The licensee currently plans to commence startup and power ascension on February 8, 1995. An interim restart organization has been formed, including i a dedicated Restart Manager, 24-hour site management coverage, an augmented   '
.. ', The licensee currently plans to commence startup and power ascension on February 8, 1995. An interim restart organization has been formed, including i
operating crew on shift and a continuously-manned, dedicated work control center. The power ascension plan calls for hold points at 50% and 90% power, 1 and includes a contingency shutdown from 30% power for corrective maintenace, l if necessary. The licensee plans to reach 100% power in approximately 3       {
a dedicated Restart Manager, 24-hour site management coverage, an augmented operating crew on shift and a continuously-manned, dedicated work control center. The power ascension plan calls for hold points at 50% and 90% power, 1
weeks. Region IV has initiated 24-hour coverage at the site and will focus on !
and includes a contingency shutdown from 30% power for corrective maintenace, if necessary. The licensee plans to reach 100% power in approximately 3
surveillance testing and maintenance, the areas of weakness that led to the   I extended shutdown. This augmented coverage will continue through March 5,     l 1995, as currently planned.                                                   I Docket No. 50-298 cc:     All NRR PDs A. Chaffee, D0PS/0ECB A. Gody, DISP /PIPB D. Norkin, DOTS /TSIB I
{
I l
weeks. Region IV has initiated 24-hour coverage at the site and will focus on surveillance testing and maintenance, the areas of weakness that led to the extended shutdown. This augmented coverage will continue through March 5, 1995, as currently planned.
l l
Docket No. 50-298 cc:
DISTRIBUTION:
All NRR PDs A. Chaffee, D0PS/0ECB A. Gody, DISP /PIPB D. Norkin, DOTS /TSIB l
PDIV-1 r/f JHall PNoonan Document Name: C00 DAILY.HL                                                   l OFC     LA/PD4r h u   PM/PD4-1   D/PD4-_1 NAME   PNoon     d   JHall/vwk   WBec$n$
l DISTRIBUTION:
DATE 9/3/95           2/F/95     Nd/95                                     l COPY   YES/NO         kS)0       YES/NO 0FFICIAL RECORD COPY I}}
PDIV-1 r/f JHall PNoonan Document Name: C00 DAILY.HL OFC LA/PD4r h u PM/PD4-1 D/PD4-_1 NAME PNoon d
JHall/vwk WBec$n$
DATE 9/3/95 2/F/95 Nd/95 COPY YES/NO kS)0 YES/NO 0FFICIAL RECORD COPY}}

Latest revision as of 05:27, 14 December 2024

Informs That All Restart Issues Re Sorc Have Been Resolved
ML20083M256
Person / Time
Site: Cooper Entergy icon.png
Issue date: 12/23/1994
From: Horn G
NEBRASKA PUBLIC POWER DISTRICT
To: Callan L
NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION IV)
Shared Package
ML20083L862 List:
References
NLS940119, NUDOCS 9505190180
Download: ML20083M256 (4)


Text

_.. - - - - - - - - - - - -- _-

v COOPER NUCLEAR STATION 1

4_ Nebraska Public Power District

" ^ " " '

~ " "A*E"*"OM;UO.^i N

NLS940119 December 23, 1994 Mr. L. L Callan Regional Administrator NRC Region IV 611 Ryan Plaza Drive, Suite 400 Arlington, Texas 76011

Dear Mr. Callan:

On August 25, 1994, you provided the District with a letter that outlined certain concerns regarding the Cooper Nuclear Station Operations Review Committee (SORC). Your letter stated in part:

[,.

[O]ur preliminary review has also resulted in our having serious concerns about the functioning of the Station Operations Review Committee (SORC).

It is clear from a review of the report [by the Office of Investigations] that members of the SORC did not, in this instance. implement their assigned duties and responsibilities. In addition, it is not apparent that the processes utilized by the SORC functioned to ensure that the SORC's oversight responsibilities were sufficiently independent from outside influences such as senior management and schedular pressures.

As you are aware. the District has responded in separate correspondence to the NRC regarding j

alleged outside imluences by senior management and alleged schedular pressures on SORC.

Accordingly, the following discussion focuses on the functionality of SORC and its ability to implement assigned duties and responsibilities.

Several NRC concerns with SORC have been supported by the District-sponsored September 1, 1994 Diagnostic Self-Assessment Team (DSAT) report and the NRC's November 29, 1994 Special Evaluation Team report. The District agrees with these conclusions and has taken significant steps to improve SORC beginning with an October 5,1994, management meeting at which the Site Manager provided his expectations regarding SORC performance. He stressed the oversight mission of the SORC, reinforced high standards and expectations, and provided guidance on how the SORC's mission should be completed. The new Plant Manager expressed similar expectations during the October 6,1994 SORC meeting.

More details regarding additional actions taken to achieve these improvements are provided below.

v 9505190180 950512 PDR ADOCK 05000298 i

P PDR J

(

NLS940119 December 23. 1994 Personnel SORC membership has changed significantly with the addition of the new Plant Manager (Chairman), the new Engineering Manager and the new Operations Manager. These personnel have provided a fresh perspective to SORC and provide the appropriate higher safety standards required for continued performance improvement at CNS.

Independent Assessments in September 1994, a group was convened to review how other utilities conduct the onsite review function, including membership, procedures, and meeting methods. Recommendations from this group included:

Revise the controlling procedure to eliminate the ideatification of membership by specific title to provide greater flexibility in establishing the SORC membership.

Implement a " qualified reviewer' process and/or the use of subcommittees to review and identify items requiring SORC review.

Upgrade meeting minutes documentation.

Clearly establish expectations for committee membership and for items being presented

-for SORC review.

These recommendations were accepted and corrective actions taken. They have led to improved efficiency and quality of SORC assessments.

Also in September 1994, the District brought onsite a recognized authority in the area of nuclear performance assessment and independent oversight improvement to serve as a mentor and coach to the SORC.

The initial task of the mentor, however, was to synthesize and evaluate information contained in the DSAT report pertaining to independent assessment activities, including the SORC. This task was performed in conjunction with the external members of the Safety Review and Audit Board (SRAB). During this effon. several weaknesses were revealed regarding independent assessment. These matters have been addressed through the SORC-specific issues that are addressed in the Phase 1 Action Plan Issue closecut (Item 1.2).

On September 23. 1994, CNS Quality Assurance (QA) issued an assessment report to the site manager on SORC. In sum, the QA concerns and recommendations were consistent with conclusions reached by other assessment organizations.

On October 27, 1994, the Plant Manager responded to QA by outlining actions that would be, or had been taken, on the stated j

concerns. QA has since determined that the Plant Manager's actions are acceptable.

t

~

NLS940119 December 23. 1994 Mentorshin Since mid-September, the SORC mentortcoach has worked with CNS line managers to enhance the ef fectiveness of oversight meetings through various activities. including frequent attendance at meetings, commentary on meeting proceedings and content, promulgation of oversight expectations, individual coaching and feedback for the SORC members, input into Procedure 0.3 revisions, and assumption of a lead role in the development of a training course for the SORC presenters. Also, the mentor / coach has worked closely with new managers throughout their transition at CNS.

Procedure Modification On November 3,1994, Procedure 0.3. " Station Operations Review Committee" was revised to describe SORC activities more accurately. Changes included the following.

Based SORC membership on disciplines (as described in Technical Specifications).

Previously. SORC membership was cased on position titles.

Utilization of a matrix format ta it entify primary and altemate members of the SORC.

SORC's primary responsibility was cla.Med to focus on issues relevant to nuclear safety, and to ensure that nuclear safety implications are recognized and properly addressed.

Trainine A training course for SORC members and alternates was presented to address the fundamentals of nuclear safety concepts and culture. The training program consisted of two full days in the classroom and covered all aspects of nuclear safety from fundamental philosophy to the bases for design and licensing, in addition. performance-based concepts and evaluanon techniques were presented in the training to provide essential skills for applying critical, results-oriented thinking and evaluation techniques for technical, administrative. and organizational problems.

Also, the cours.: led to improved insight by SORC members of potential safety impacts of reviewed informanon.

Conclusion The District recognizes that the quality of the function that SORC performs is dependent on the attitude of its members, as well as. controlling procedures and processes. Procedures and processes can be changed, but the key ingredient to the success of SORC is the ability to

NIE940119 December 23. 1994 differentiate between line-management functions and those of independent assessment.

Consistent with this approach, new SORC prsonnel already have improved SORC effectiveness.

Items are being presented in more effective ways, and deliberations are clearly focused on nuclear safety. Improved processes and procedures have led to increased efficiency. The actions desenbed in this letter also have resulted in the appropriate intrusive attitude regarding issues being discussed.

As a final note. the District notes its awareness that it must ensure that SORC members have the proper priority between SORC activities and routine job activities. Without this protocol, unacceptable backlogs in SORC issues or work activities could result. The combined actions discussed in this letter respond to NRC concerns. More importantly, these actions respond to what District management believes is necessary for a successfully functioning SORC. Based on the actions that we have taken, the District concludes that all restart issues pertaining to SORC have been resolved.

Sinc 6 rely,

/ o-G. R Horn i\\ ke-President. Nuclear ec:

U. S. Nuclear Regulatory Commission Attention: Document Control Desk NRC Resident Inspector Office Cooper Nuclear Station NPG Distribution N,

o-

[(T* Ctg I g t

UNITED STATES NUCLEAR REGULATORY COMMISSION 20 -

,g g

f WASHINGTON, D.C. 20 % 5-0001

%,,[g /

February 9, 1995 MEMORANDUM T0:

Files

)

James R. Hall, Senior Project Manager ()M FROM:

Project Directorate IV-1

/

Division of Reactor Projects III/IV U

SUBJECT:

CLOSURE OF NRR COOPER RESTART ITEMS 1

The purpose of this memorandum is to document the administrative closure of several items assigned to NRR in the Cooper Restart Action Plan, dated December 21, 1994.

These items are identified in the Action Plan Case Specific Checklists, Parts I and II, as specified below.

Case Specific Checklist - Part I:

B.2,a -

Issue Daily and Director's Highlights Copies of all NRR Director's Highlights on Cooper since 8/1/94 were sent to Region IV/DRP (T. Reis) for inclusion in the restart file on 2/3/95.

8.4.5.b -

NRC Evaluation of Applicable Items from Section C " ISSUES" Complete This memorandum documents NRR completion of those items on Part II of the Case Specific Checklist, as discussed below.

B.4.5.f - Comments from Other Parties Considered A January 20, 1995, note to file from Daniel M. Barss, NRR, documented his discussions with FEMA officials regarding the proposed restart of the Cooper Nuclear Station. Neither FEMA Headquarters nor FEMA Region VII personnel had any offsite emergency preparedness concerns that would affect the proposed restart of Cooper.

By letter dated January 25, 1995, Mr. John A. Miller, FEMA Region VII Director, notified the State of Nebraska that the deficiency identified in the November 16, 1994, emergency exercise at Cooper had been corrected, j

l B.4.6.1 -

Applicable License Amendments Have Been Issued On February 3, 1995, the staff issued Amendment No. 168 for Cooper, revising the Technical Specification definition for Limiting Conditions for Operation. All amendments necessary to support restart have now been issued.

.I B.4.6.2 -

Applicable Exemptions Have Been Granted Based on our review of the licensee's letter dated January 26, 1995, NRR m

concludes that no specific exemptions are required prior to allowing rem L

D f

l

r 1

9 i

.i Cooper restart.

NRR is continuing to review certain generic issues that may be applicable to Cooper; those issues will be pursued when the staff's positions are determined.

B.4.6.3 -

Applicable Reliefs Have Been Granted On February 7,1995, NRR granted a relief. request to allow the HPCI turbine exhaust branch line weld to remain in service for the remainder of the current 10-year ISI interval (through the next refueling outage).

No other reliefs are required prior to restart.

B.S.c -

No Restart Objections From Other Applicable HQ Offices The Cooper Restart Panel believes that all significant enforcement issues have been sufficiently resolved to allow restart; however, NRR asked the Office of Enforcement if OE had any objection to restart (R. Hall conversation with J. Beall, 2/3/95; no response received).

In addition, OCA was notified of Cooper's proposed restart date (R. Hall conversation with T. Madden, 1/31/95; no comments received).

B.5 d -

No Restart Objections from Applicable Federal Agencies FEMA was the only " applicable" Federal agency identified by the Restart Panel for consultation concerning Cooper restart; FEMA expressed no objections, as described in item B.4.5.f above.

B 5.h -

Conduct ACRS Briefing / Notification NRR contacted ACRS staff in December 1994, to determine if a briefing was desired. On February 1, 1995, ACRS staff indicated that the ACRS does not normally request a briefing on plants shut down for less than one year; the ACRS staff will notify NRR if a briefing is desired at some point after Cooper restart (D. Coe, ACRS, Email to R. Hall).

B.5.1.1 -

Coordination with Interested Agencies / Parties - FEMA See item B.4.5.f above.

Case Specific Checklist - Part II:

Item 10.e - Modification to Add REC Containment Isolation Valves This issue was identified by the licensee in their Operating Experience Review of NRC IN 89-55, which addressed the potential vulnerability of REC piping to a HELB, and the subsequent potential for loss of containment isolation capability.

Based on discussions with NRR/SCSB (R. Barrett, J. Pulsipher, W. Long) it appears that the scenario for IN 89-55 is beyond Cooper's licensing basis.

The licensee has developed an internal position paper based on a probabilistic safety assessment w

I

3:

~

1r)

?:

i i.

(PSA), which concludes that modifications are not required for compliance with the license and would not result in a significant benefit to safety.

On May 24, 1994, Region III submitted a TIA to NRR addressing this same issue for the Dresden station.

That TIA requested an NRR position for this issue, which appears to be generic for several Mark I BWRs, including Brown's Ferry.

NRR is currently reviewing the TIA and the final staff position will be evaluated for applicability to Cooper.

Based on this information, this item is not considered a startup issue for Cooper.

Item 12 -

Exceeding Cooldown Rate This item involved a review of LER 94-015, Revision 1, which described several instances where limits on reactor vessel heatup and cooldown rates were exceeded.

NRR has reviewed the licensee's detailed analyses of these events (licensee restart item No. 7.3), and has found the analyses acceptable, as documented in a memorandum from J. Strosnider to W. Beckner, dated February 6, 1995.

Item 13 - FEMA Concern The identified FEMA deficiency from the November 16, 1994, emergency exercise at Cooper has been adequately resolved, as discussed in the January 25, 1995, letter from John A. Miller, FEMA Region VII Director, to Richard Semm, Nebraska State Civil Defense Agency (See also Item B.4.5.f above).

Docket No. 50-298

%=

~

p*nove d-p 4

UNITED STATES D

{

j NUCLEAR REGULATORY COMMISSION 3

WASHINGTON, D.C. 20066-4001

$s

  • 1 Jecember 12, 1994 EA Nos.94-164, 94-165,94-166 Nebraska Public Power District ATTN: Guy R. Horn Vice President - Nuclear Post Office Box 499 Columbus, Nebraska 68602-0499

SUBJECT:

NOTICE OF VIOLATION AND PROPOSED IMPOSITION OF CIVIL PENALTIES -

$300,000 (NRC Inspection Report Nos. 50-298/94-14, 50-298/94-16, 50-298/94-19)

This refers to three inspections conducted from May 23, 1994, to August 12, 1994, at the Cooper Nuclear Station (CNS) facility, near Brownville, Nebraska.

These inspections were conducted specifically to review the circumstances involving:

1) the identification, in May and June, 1994, by the CNS staff of numerous primary containment penetrations that were installed in configurations that were contrary to NRC requirements and never had been local leak rate tested; 2) the circumstances surrounding the declaration of a Notification of Unusual Event and plant shutdown on May 25, 1994, because both emergency diesel generators were declared inoperable; and 3) the identification by the CNS staff of numerous hardware deficiencies that resulted in the failure of the control room envelope pressurization test on April 11,1994. The reports documenting the results of these inspections were sent to you on September 2, 1994 (50-298/94-14), September 12, 1994 (50-298/94-16), and September 9, 1994 (50-298/94-19). On September 16, 1994, you and other Nebraska Public Power District (NPPD) representatives attended an enforcement conference, which was open to public observation in accordance with the Commissions's continuing trial program, in the NRC's Region IV office to discuss NRC's preliminary conclusion that significant violations of NRC requirements and plant Technical Specifications (TS) had occurred.

On the basis of the information developed during the inspections and the information provided during the enforcement conference, the NRC has determined that a number of significant violations of NRC requirements occurred. contains a Notice of Violation and Proposed Imposition of Civil Ponalties (Notice) s.nat describes these violations which have been grouped into the following three problem areas, each problem being associated with the safety-related system that was affected:

Problem I.A consists of violations related to the primary containment system and the failure to 'naintain the system operable in accordance with the requirements of the plant TS, the failure to adequately test the system in accordance with the requirements of 10 CFR Part 50, Appendix B, Criterion XI, and the failure to maintain an adequate design control of the system in accordance with the requirements of 10 CFR Part 50, Appendix B, Criterion III.

These failures to test and maintain the

%Q&DC'(p

.y p

Q, Nebraska Public Power District,

. primary containment system resulted in containment integrity not.being' maintained at all times when required because the surveillance requirements for the local' leak rate testing of. 82 components.had never.

.been implemented within the specified surveillance frequency.and, when

. testing was eventually performed, containment leak rate limits.were exceeded.

Problem I.B consists of violations associated with the 480 volt and 4160 volt critical buses and the failure to maintain the systems operable in.-

accordance with the requirements.of the plant TS and the failure to adequately test the systems in accordance with the requirements of 10 2

CFR Part 50, Appendix B, Criterion XI. Specifically, CNS had ' failed to test undervoltage relays associated with the 480 volt and 4160 volt critical buses and because of these failures, the buses have not been capable of performing their safety-related function since operation of the station commenced January 18, 1974.

t Problem I.C consists of violations pertaining to the control room emergency filter system and the failure to maintain the system operable in accordance with the requirements of the plant TS-and the failure to adequately test the system in accordance with the requirements of 10 CFR -Part 50, Appendix B, Criterion XI. As.a result of these failures, from June 1989 until April 28, 1994, the control room emergency filter system was not operable at all times when required because testing failed to demonstrate that a positive pressure could be maintained in the control room during the periodic performance of the control room envelope.

pressurization test.

At the September 16 enforcement conference, NPPD characterized the violations associated with the operability of these systems as having minimal safety significance but acknowledged the regulatory significance of the violations, both individually and collectively. However, it is NRC's view that all of the identified violations associated with the three problems represent significant safety issues.

Further, NRC agrees.that the violations are of regulatory significance and provide a sufficient basis for the issuance of the three Severity Level III problems.

The NRC believes that chronic and fundamental weaknesses have negatively affected the safety performance of the CNS facility for an unacceptable 1y long period of time. The description and bases for our concerns with these problems are contained-in Enclosure 2.

The results of NPPD's and NRC's inspections into the causes of these violations. confirm the NRC's concerns about the effectiveness of NPPD's management of and processes for ensuring that safety systems and components

.i are sufficiently maintained, tested, and controlled such that these systems and components will perform as intended if called upon to mitigate the I

consequences of an accident. NPPD's and NRC's inspections detemined that the following inadequacies caused or contributed to the occurrence of these violations: the continuing practice of inappropriately preconditioning plant hardware to obtain satisfactory test results, which was previously identified i-5 P

.m..

,,y c _.,.

t Nebraska Public Power District

  • by the NRC in 1993; a continuing failure by NPPD to adequately address identified hardware deficiencies without NRC involvement and prompting; insufficient management oversight, guidance, and monitoring relative to test and design control programs; a failure to identify original design errors; inadequate maintenance and surveillance procedures; and inadequate post-maintenance testing.

During the September 16 enforcement conference, NPPD acknowledged the need for strong, broad-based corrective actions in addition to correcting the specific violations. NRC agrees that broad-based corrective actions are essential.

However, the violations that are the subject of this action are similar to violations identified by NRC as early as 1992, and the corrective actions taken to resolve those past problems have been less than fully effective in preventing the recurrence of similar problems. While NRC does not take issue with any of the licensee-identified causes of the violations, NRC believes that the root causes of these violations are more fundamental.

Specifically, these violations are indicative of the long-term failure of senior NPPD managers to:

1) implement effective safety processes and procedures; 2) institute a positive station-wide attitude towards identifying and correcting problems; 3) provide effective oversight and monitoring of the CNS staff and programs in order to ensure a high level of safety performance at CNS; and 4) instill and maintain an attitude among plant staff that emphasizes plant safety.

We understand that the actions taken to correct these problems include the following:

1) for Problem I.A, you have taken steps to resolve the design and testing problems and established a program owner and basis document to comply with the requirements of Appendix J of 10 CFR Part 50;
2) for Problem I.B, you have identified and tested all of the affected critical circuits, evaluated and/or tested the remaining circuits, and you have completed, or are in the process of completing a multi-discipline review of your Operational Experience Review Program; 3) for Problem I.C, you installed hardware modifications; and 4) as to each of these problems, you initiated safety culture improvements, revised testing procedures, and expedited design basis reconstitution.

In addition, further corrective steps that NRC has required to be taken are outlined in Confirmatory Action Letters 4-94-06, 4-94-06A, 4-94-06B, and 4-94-08. These steps include defining the design basis for your surveillance testing program such that each structure, system, or component is properly tested to validate that it can perform its intended design function, confirming that all discrepancies associated with the primary containment system have been resolved, describing the actions taken to prevent recurrence of the installation of devices that prevent the actuation of safety-related systems, and confirming that inservice inspection of penetration welds are adequately implemented.

Nevertheless, to clearly emphasize the need for senior NPPD managers to identify and undertake sustained actions to improve the overall level of safety performance at CNS, I have been authorized, after consultation with the Comission, to issue the enclosed Notice of Violation and Proposed Imposition of Civil Penalties (Notice) in the amount of $300,000 for the three Severity Level III problems described above, in Enclosure 2, and in the Notice.

Nebraska Public Power District The base value of a civil penalty for a Severity Level III problem is $50,000.

Normal application of the enforcement policy could have resulted in significantly higher civil penalty amounts for each of the three Severity Level III problems cited in the Notice.

For example, 100% escalation for each problem would be warranted for each of the following factors:

1) past performance, as exhibited by NPPO's poor performance in the areas of problem identification and resolution, maintenance, surveillance +et ting, and engineering; 2) prior opportunity to identify or prevent & violations because NPPD had multiple prior opportunities to identify and prevent the violations composing Problems I.A., I.B., and I.C.; and 3) duration of the violations, because the violations composing Problems I.A.,

I.B., and I.C.

have existed for many years.

Based on these three factors alone, the adjustment factors could have been applied to increase the proposed civil penalty by 300% for each of the problems. However, in light of your initiative to shut down the plant until you could successfully implement an extensive improvement program to address the underlying root causes of performance deficiencies, your commitment not to restart the plant without prior NRC approval, and your significant changes in management oversight of licensed activities, the NRC has decided to exercise broad discretion, pursuant to paragraph VII.B.6. of the Enforcement Policy, and set the civil 4

penalty at $100,000 for each of the Severity Level III problems. Therefore, i

the total proposed penalty for this action is $300,000.

]

In addition to the violations discussed above, the Notice contains two Severity Level IV violations which have not been assessed a civil penalty.

These violations involve:

1) the failure to update the safety-related drawing list in accordance with an engineering procedure; and 2) the failure to l

maintain an appropriate procedure for the preventive maintenance of 480-volt circuit breakers.

NPPD is required to respond to this letter and should follow the instructions specified in the enclosed Notice when preparing its response.

In its response, NPPD should document the specific actions taken and any additional actions it plans to prevent recurrence. After reviewing the response to this Notice, including proposed corrective actions and the results of future inspections, the NRC will determine whether further NRC enforcement action is necessary to ensure compliance with NRC regulatory requirements.

In accordance with 10 CFR 2.790 of the NRC's " Rules of Practice," a copy of this letter and its enclosure will be placed in the NRC Public Document Room (PDR). To the extent possible, your response should not include any personal privacy, proprietary, or safeguards information so that it can be placed in the PDR without redaction. However, if you find it necessary to include such information you should clearly indicate the specific information that you desire not to be ple.ced in the PDR, and, provide the legal basis to support your request for withholding the information from the public.

I J

Nebraska Public Power District 5

.The responses directed by this letter and the enclosed Notice are not subject to the clearance procedures of the Office of Management and Budget as' required by the Paperwork Reduction Act of 1980, Pub. L. No.96-511.

Sincerely,

[s 4. IM ames L. Milhoan eputy Executive Director for uclear Reactor Regulation, Regional Operations, and Research Docket No.

50-298 License No. DPR-46 EAs94-164, 94-165,94-166

Enclosures:

1.-

Notice of Violation and Proposed Imposition of Civil Penalties 2.

Description of the Severity Level III Problems

-t n

NOTICE OF VIOLATION 1

AND PROPOSED IMPOSITION OF CIVIL PENALTIES Nebraska Public Power District-Docket No. 50-298 Cooper Nuclear Station License No. DPR-46 EA Nos.94-164, 94-165,94-166 During NRC-inspections conducted from May 23, 1994, to August 12, 1994, violations of NRC requirements were identified.

In accordance with the

" General Statement of Policy and Procedure for NRC Enforcement Actions,"

i 10 CFR Part 2, Appendix C, the Nuclear Regulatory Commission proposes to impose civil penalties pursuant to Section 234 of the Atomic Energy Act of 1954, as amended (Act), 42 U.S.C. 2282, and 10 CFR 2.205. The particular violations and associated civil penalties are set forth below:

I.

Violations Assessed A Civil Penalty A.

1.

Technical Specification 3.7.A.2.a, " Containment Integrity,"

states, in part, that " primary containment integrity shall be maintained at all times when the reactor is critical or when the reactor water temperature is above 212*F and when fuel is in the reactor vessel...."

Technical Specification Surveillance Requirement 4.7.A.2.f.1, " Leak Rate Testing," states, in part, y

that "... local leak rate tests (LLRTs) shall be performed on the primary containment testable penetrations and isolation valves at a pressure of 58 psig during each reactor shutdown for refueling, or other convenient intervals, but in no case'at intervals no greater than two years....

The total acceptable leakage rate for all valves and penetrations other than the MSIVs (main steam.

isolation valves] is 0.60 La."

Technical Specification 1.Y, " Surveillance Frequency,"

states, in part, that " performance of a Surveillance Requirement within the specified time interval shall constitute compliance with operability requirements for an i

LCO [ limiting condition for operation) unless otherwise required by the specification."

Contrary to the above, from January 18, 1974, until May 27, 1994, primary containment integrity was not maintained at all times when the reactor was critical or when the reactor water temperature was above 212*F and fuel was in the reactor vessel in that the Surveillance Requirement for the local leak rate testing of 82 components had never been implemented at an interval not to exceed two years. As the result of testing conducted on June 23, 1994, Isolation Valve IA-65CV (one of the 82 components) failed the LLRT, resulting in a total leakage value that significantly 1

exceeded the 0.60 La limit.

The 0.60 La limit corresponds to a leakage rate of 5.37 scmh (189.60 scfh). The LLRT i

rs,,en11( A V)

"- - l ' ( \\ g/ [ 'Wd t/g/

)

l

y

+.+.

.a..

m>

a e

-sw.

.-w

-n a-

- ~.-.. - -

'y.

t

_ :,u Notice of Violation-2-

l l

failure of. Valve IA-65CV resulted in a. total leakage rate that exceeded 17.66'scah (623.57 scfh).-(01013).

2.

=10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"

states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in service is identified and performed.in c

accordance with written test procedures which incorporate the requirements and acceptance limits contained in applicable design documents."

CNS Quality Assurance Program for Operation Policy Directive, Revision 10, Section 2.11, written to implement.

the requirements of 10 CFR Part 50, Appendix B, Criterion XI, requires that each type of test program performed will be defined by written procedures and instructions, and it requires that acceptance tests will be developed for structures, systems, and components to demonstrate their capability to perform satisfactorily following repairs or modification.

a.

Contrary to the above, the licensee did'not assure that all testing was identified and perforised in accordance with written test procedures which incorporated the requirements and acceptable limits..

Specifically as of May 14, 1994, 68 components passing through 54 primary containment penetrations, each required to be local leak rate tested in accordance with the requirements of Technical Specification Surveillance Requirement 4.7.~A.2.f.1, " Leak Rate

{

Testing," had not been identified in a procedure as requiring local leak rate testing,'as required by CNS Quality Assurance Program for Operation Policy Directive, Revision 10,.Section 2.11.

These components had never been local leak rate tested.

(01023) b.

Contrary to the-above, the licensee did not assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits.

As of June 21, 1994, instrument pressure switches PC-PS-12A, B, C, and 0; PC-PS-101A, B, C,.and D; PC-PS-t 119A, B, C, and D; PC-PS-16; and PC-PT-512A and B, each required to be local leak rate tested in accordance with the requirements of Technical Specification Surveillance Requirement 4.7.A.2.f.1,

" Leak Rate Testing," had not been identified in a procedure as requiring local leak rate testing after being isolated from the containment integrated leak

u.

r Notice of-Violation

- 3.-

rate test, as required by CNS Quality Assurance Program for Operation Policy Directive, Revision 10,.

Section 2.11.

These switches had never been local L

leak rate tested. (01033) 3.

10 CFR Part 50, Appendix B, Criterion III, " Design Control,"

states in part, that "[m]easures shall be established to assure that... the design basis... [is] correctly translated into specifications, drawings, procedures, and instructions. These measures shall include provisions to j

assure that appropriate quality standards are specified and i

included in design documents and that deviations from such J

standards are controlled."

Draft General Design Criterion 53, a measure written to comply with the requirements of 10 CFR Part 50, Appendix B, Criterion III, as committed to in Appendix F of the Updated Safety Analysis Report (USAR), states that "[p]enetrations L

that require closure for the containment function shall be protected by redundant valving and associated apparatus."

Draft General Design Criterion 1, as committed to in Appendix F of the USAR, states that "[t] hose' systems and components of reactor facilities which are essential to the prevention of accidents which could effect the and safety or mitigation of their consecuences public health shall be identified and then designed, fabricatec, and erected to quality standards that reflect the importance of the safety function to be performed."

General Electric Design Specification No. 22All53, " Codes and Industrial Standard," Revision 1, states, in Note 3 of the Appendix, that "[p]iping, which is an integral part of the primary containment for isolation purposes, shall have at least the same quality and levels of assurance as the primary containment."

i Contrary to Criterion III, the licensee did not assure that I

the above design bases were correctly translated into I

specifications and instructions'and did not assure that deviations from quality standards were controlled.

Specifically:

)

l a.

As of May 14, 1994, numerous primary containment i

penetrations had no redundant valving. These I

penetrations included, but were not limited to, Penetrations X-21, X-22, X-25, X-29E, X-30E/F, X-33E/F, X-209A/B/C/0, and X-218.

l l-b.

As of February 22, 1994, 10 penetrations consisting of manually operated vents, drains, and test connections i

l

~

(

Notice of Violation p.

and requiring closure for the containment function, had a single manual-isolation valve for containment isolation as opposed to the required redundant valving l

and associated apparatus.

t During an NRC inspection conducted June 13, 1994, c.

through August 12, 1994, it was determined that approximately 300 containment penetrations had not I

been designed, fabricated, or installed to the same

{

standards as the primary containment because these i

components had not been correctly classified as essential.

l As a result, these penetrations had not been designed, fabricated, or erected to quality 3

standards that reflect the importance of the safety

)

function to be performed (e.g.

some welds were not nondestructively tested, some p,enetrations were not local leak rate tested, and the penetrations were not treated as safety-related by the licensee's quality assurance program). (01043)

This is a Severity Level III problem (Supplement I).

Civil Penalty - $100,000 B.

1.

Technical Specification 3.9.A.I.c, " Auxiliary Electrical Equipment," requires, in part, that the reactor shall not be made critical from a Cold Shutdown Condition unless the 4160 volt critical buses IF and IG and the 480 volt critical buses IF and IG are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.

Technical Specification Surveillance Requirement 4.9.A.I.a,

" Emergency Buses Undervoltage relays," states that "once every 18 months, loss of voltage on emergency buses is simulated to demonstrate the load shedding from emergency buses and the automatic start of diesel generators."

USAR Section 2.2.7.2.1.a, " Standby A-C Power (Diesel Generators)

Test Capability," defines the function of the protective scheme as providing for the clearing the buses of all motor loads excepting supply to the 480 volt critical unit substation.

Technical Specification 1.Y, " Surveillance Frequency,"

states, in pari., that " performance of a Surveillance Requirement within the specified time interval shall constitute compliance with operability requirements for an LCO [ limiting condition for operation] unless otherwise required by the specification."

Contrary to above, from January 18, 1974 until May 25, 1994, the reactor had been made critical without 4160 volt i

e

~ Notice of Violation.

  • i critical buses' IF and IG, and 480 volt critical buses IF and IG being operable in that the undervoltage relays associated -

with several of the electrical loads supplied by these buses had never been tested to demonstrate their operability or, upon testing, failed to perform their intended function of shedding their respective electrical loads from these buses.

(02013) 2.

10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"

states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in service is identified and performed in accordance with written test procedures which incorporate the requirements and acceptable limits contained in applicable design documents."

Contrary to the above, the licensee did not. assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits.

Specifically:

a.

During an NRC inspection conducted May 23, 1994, through August 12, 1994, Procedure 6.3.4.3,

" Sequential Loading of Emergency Diesel Generators,"

Revision 31, which is performed to satisfy Technical 4

Specification Surveillance Requirement 4.9.A.I.a, i

" Loss of Voltage Relays," was determined to be inadequate because it did not assure that the emergency diesel generators and critical buses would perform satisfactorily in service in that the procedure did not contain requirements to verify that i

the 480-volt supply breakers for safety-related and nonsafety-related loads would shed from their electrical buses within a specified time, nor did the procedure identify that the control rod drive pump motors and station air compressors were required to be shed from the electrical bus.

b.

During an inspection conducted May 23, 1994, through-August 12, 1994, the NRC. identified that Procedure 6.3.20.1, "RHR Service Water Booster Pump Flow Test and Valve Operability Test," Revision 27, did not provide for the testing of the load shedding feature of the supply breakers associated with the 4160 volt residual heat removal service water booster pumps.

(02023)

This is a Severity Level III problem (Supplement I).

Civil Penalty - $100,000.

e

,1 3

' Notice of Violation C.-

1.

Technical. Specification 3.12.A.1, " Control Room Emergency Filter System," states, in part, that "... the Control Room Emergency Filter system... shall be operable at all times when containment integrity is required."

The Order Confirming Licensee C:mmitments on Post-TMI Related Issues, dated July 10, 1981, confirms NPPD's commitment to complete NUREG-0737, " Clarification of TMI Action P1an Requirements," Item III.D.3.4, " Control Room-Habitability."

Item III.D.3.4 involves the review of-facility design requirements against the Standard Review Plan. The NPPD response to Generic Letter 80-90, dated December 30, 1980, submitted the control room habitability evaluation, which stated, in part, "the CNS control room ventilation system is designed to maintain the control room at about %-in. H O [0.031 kPa] positive pressure by.

2 supplying air at a high enough pressure that even when system losses and the booster exhaust fan pressures are accounted for, the control room pressure is still positive... "

A Safety Evaluation Report for the Cooper Station from the Accident Evaluation Branch on NUREG-0737, Item No.

III.D.3.4, ~ " Control Room Habitability," dated February 24, 1982, states, in part, that "... the design meets the criteria identified in Item III.D.3.4 of NUREG-0737 and is acceptable."

Contrary to the above, from June 1989 until April 28, 1994, the Control Room Emergency Filter system was not operable at all times when containment integrity was required in that testing failed to' demonstrate that a positive pressure could be maintained in the control room during the periodic performance of the control room envelope pressurization test. (03013) 2.

10 CFR Part 50, Appendix B, Criterion XI, " Test Control,"

states, in part, that "[a] test program shall be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in' service is identified and performed in accordance with written test procedures which incorporate the requirements and acceptance limits contained in j

applicable design documents."

CNS Quality Assurance Program for Operation Policy Directive, Revision 10, Section 2.11, written to implement the requirements of 10 CFR Part 50, Appendix B, Criterion XI, requires that each type of test program performed will be defined by written procedures and instructions, and it j

requires that acceptance tests will be developed for j

']

i

)

')

7 Notice of Violation '!

l I

l structures, systems, and components to demonstrate their capability to perform satisfactorily following repairs or.

{

modification.

{

Contrary to the above, the licensee did not assure that all'

]

testing was identified and performed in accordance with written test procedures which incorporated the requirements L

and acceptance limits in applicable design documents.

Specifically, from June 1989 until June 1994, Surveillance-Procedure 6.3.17.18, " Control Room Envelope Pressurization l

Test," Revision 4,.was not sufficiently detailed in.that it i

did not incorporate acceptance limits to assure that the l

Control Room Emergency Filter system would perform satisfactorily in service and because the procedure did not prohibit the inappropriate manipulation of pressures in the adjoining buildings as a precondition for conducting the test. (03023)

This is a Severity Level III problem (Supplement I).

Civil Penalty - $100,000.

II.

Violations Not Assessed A Civil Penalty A.

10 CFR Part 50, Appendix B, Criterion V, " Instructions, Procedures

{

and Drawings," states,-in part, that "[a]ctivities affecting quality shall be prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances and shall be accomplished in accordance-with these instructions, procedures, or drawings."

Engineering Procedure 3.8, " Drawing Control Procedure,"

Revision.7, written, in part, to implement 10 CFR Part 50, Appendix B, Criterion V, requires that safety-related drawings be included on the safety-related drawing list.

1.

Contrary to the above, during an NRC inspection conducted June 13, 1994, through August 12, 1994, it was determined that safety-related Flow Diagram No. 2028, " Reactor Building and Drywell Equipment Drain System," Revision N27, was not included on the safety-related drawing list. As a result of this determination, the licensee subsequtntly identified 13 other drawings containing safety-related components that were not included on the safety-related drawing list.

(04014)

This is Severity Level IV violation (Supplement I).

2.

Contrary to the above, during an NRC inspection conducted May-23, 1994, through August 12, 1994, Maintenance Procedure 7.3.2.1, "DB-25 and DB-50 Circuit Breakers - Setting, Testing, and Maintenance (With Amptectors)," Revision 3, was

..~

i Notice of Violation- '

]

q' t

determined-to be inappropriate to the circumstances in that the procedure did not contain~a requirement to remove tie-wraps from the subject circuit breakers following preventive maintenance, nor did the procedure provide for comprehensive postmaintenance testing of all circuit breaker functions following the completion of preventive maintenance. (05014)

This is a Severity Level IV. violation (Supplement I).

Pursuant to the provisions of 10 CFR 2.201, Nebraska' Public Power District (Licensee) is hereby required to submit a written statement or explanation to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, 1

within 30 days of the date of this Notice of Violation and Proposed Imposition-of Civil Penalties (Notice). This reply should be clearly marked as a " Reply i

to a Notice of Violation" and should include for each alleged violation:- (1) i admission or denial of the alleged violation, (2) the reasons for the t

violation if admitted, and if denied, the reasons why, (3) the corrective steps that have been taken and the results achieved, (4) the corrective steps i

that will be taken to avoid further violations, ~ and (5) the date when full compliance will be achieved.

If an adequate reply is not received within the l

time specified in this Notice, an order or a Demand for Information may be issued as to why the license should not be modified, suspended, or revoked or why such other action as may be proper should not be taken. Consideration may be given to extending the response time for good cause shown. Under the authority of Section 182 of the Act, 42 U.S.C. 2232, this response shall-be submitted under oath or affirmation.

i Within the same time as provided for the response required above under 10 CFR i

r 2.201, the Licensee may pay the civil penalties by letter addressed to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, with a check, draft, money order, or electronic' transfer payable to the Treasurer of i

the United States in the amount of the civil penalties proposed above, or may.

protest imposition of the civil penalties in whole or in part, by a written l

answer addressed to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission.

Should the Licensee fail to answer within the time specified, an order imposing the civil penalties will be issued. Should the i

Licensee elect to file an answer in accordance with 10 CFR 2.205 protesting the civil penalties, in whole or in part, such answer should be clearly marked-as an " Answer to a Notice of Violation" and may:

(1) deny the violation (s) listed in this Notice, in whole or in part, (2) demonstrate extenuating circumstances, (3) show error in this Notice, or (4) show other reasons why i

the penalties should not be imposed.

In addition to protesting the civil penalties in whole or in part, such answer may request remission'or mitigation of the penalties.

In requesting mitigation of the proposed penalties, the factors addressed in Section VI.B.2 of 10 CFR Part 2. Appendix C, should be addressed. Any written answer,in accordance with 10 CFR 2.205 should be set forth separately from the i

statement or explanation in reply pursuant to 10 CFR 2.201, but may incorporate parts of the 10 CFR 2.201 reply by specific reference (e.g.,

citing page and paragraph numbers) to avoid repetition. The attention of the 6

1 1

Notice of Violation '

Licensee is directed to the other provisions of 10 CFR 2.205, regarding the procedure for imposing civil penalties.

Upon failure to pay any civil penalties due which subsequently have been determined in accordance with the applicable provisions of 10 CFR 2.205, this matter may be referred to the Attorney General, and the penalty, unless compromised, remitted, or-mitigated, may be collected by civil action pursuant to Section 234(c) of the Act, 42 U.S.C. 2282c.

The response noted above (Reply to Notice of Violation, letter with payment of civil penalties, and Answer to a Notice of Violation) should be addressed to:

Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, ATTN:

Document Control Desk, Washington, D.C. 20555 with a copy to the Regional Administrator, U.S. Nuclear Regulatory Commission, Region IV, 611 Ryan Plaza Drive, Suite 400, Arlington, Texas, 76011 and a copy to the NRC Resident Inspector at the facility that is the subject of this Notice.

Dated a Rockville, Maryland this (

' day of December,1994.

{

s o

^

Enclosure '2 - Description of. the~ Severity Level III Problems A.

Primary Containment Svstem Problem (I. A) 1 from NRC's perspective, the three, violations associated with the primary

- containment system problem were important from a safety and regulatory i

significance standpoint because NPPD's surveillance testing and system 2

design control programs for the primary containment system possessed neither the rigor nor the technical; depth to be able to maintain the.

1 original design or adequately test the operability of the system. As a result,.NPPD was unable to' reliably determine system operability,'and the consequence of_this failure was that the containment system was inoperable fros'the original licensing in 1974, until the problem was <

identified by NRC and NPPD personnel in May 1994. These longstanding problems.with the design and testing of the primary containment system were permitted to exist for an extended period of time and the failure.

of NPPD management and staff to identify and correct these problems resulted in the continuing degradation of this safety-related system.

The failure to maintain primary containment integrity (Violation I.A.1).

is considered safety significant because, despite NPPD being able to demonstrate by analysis, performed after the violation was identified, that although the primary containment system was able to perform its intended safety function, the leakage rate associated only with isolation valve IA-65CV greatly exceeded the combined maximum permissible leakage rate for all primary containment penetrations.

In arriving at its conclusion that the primary containment system was capable of performing 'its intended safety function, NPPD assumed a failure mode of the nonsafety-related instrument air system such that-

-i all.the post-accident primary containment bypass leakage would still-be filtered, resulting in control room and off-site dose rates that did not exceed regulatory requirements.

Since NPPD did not assume an unfiltered i

release relative to this analysis, the potential for excessive control room and off-site dose rates was not calculated and evaluated for significance.

Violation I.A.2 is discussed in Section 0 of this enclosure.

I Violation I.A.3 associated with the primary containment system problem consists of a systematic failure in the design control of the containment system and is considered equally safety-significant. NRC recognizes that the primary containment penetration design deficiencies y

occurred during the. construction of the plant, and NRC also recognizes that these deficiencies were identified as a result of implementing corrective actions for violations identified by NRC in 1993. However, the' corrective actions that resulted in the identification of these s

deficiencies were not implemented in response to previous escalated enforcement action taken in EA 93-137. Additionally, NRC believes that the primary containment penetration design deficiencies should have been identified by routine efforts much sooner. Therefore, discretion or j

mitigation for this violation as discussed in Sections VII.B.4 and 5 of the Enforcement Policy is not appropriate.

1

?

. ~

lJe m

6

'B.

' Critical Buses Problem"(I.8).

I The'inoperability.of the 480 voit and 4160 volt critical buses (Violation I.B.1) is also considered significant from a. safety and regulatory standpoint. At the September 16 enforcement conference, NPP

+

presented the.results of an evaluation of emergency; diesel generator-loading, which assumed that shedding'of non-essential loads would not.

. On the basis of this evaluation, NPPD concluded that the occur.

emergency. diesel. generators would still be capable of performing their.

intended safety function.

The NRC review of this evaluation is still-J ongoing;-however,. based on' a preliminary review, NRC has no basis for disputing the conclusions reached by NPPD with regard to emergency diesel generator operability, even though the NRC did identify several-weaknesses'in the NPPD evaluation.

Although the emergency diesel generators appear to have remained functional during the period the undervoltage relays-associated with certain electrical loads were not tested or were not operable, NRC has which are supplied with electrical power by the emerg generators under certain accident conditions, were inoperable.

conclusion was based on the undervoltage relays associated with some of This NRC's determination that undervoltage relays were on the relays: 'l) having never been tested (e.g.,' station air compressors IA and 18 which are. supplied by 480 volt critical buses IF and IG); 2 control cen)ters N,.V, MR, and OG-1 which are also su critical buses IF and 1G); and 3) failing to function as the result of e

configuration changes pumps 1A-D which are su(pplied by 4160 volt critical ' bu Consequently, NRC has recharacterized the~ apparent violation of TS 3.9.A.I.b (298/9416-03) as a violation of TS 3.9.A.1.c.

TS 3.9. A.I.c requires that the reactor not be made critical from a Cold Shutdown Condition unless the 4160 volt critical buses IF and IG and th critical buses IF and IG are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.

Violation I.B.2 is discussed in Section D of this enclosure.

C.

Control Room Emeroency Filter System Problem (I.C)

I The circumstances involving the control room emergency filter system problem consisted both of inadequacy of the test control program and violations of the plant TS concern with the maintenance (Problem I.C.1), and illustrate a serious NRC and testing practices at CNS. NRC and maintenance of the secondary containment. identified ina The corrective actions inoperable control room emer,gency filter system.for. those The continuing practice of inappropriate preconditioning of structures, systems, and components to obtain satisfactory test results, as evidenced by the A

s

.g

.. manipulation of the pressures in the adjoining buildings to obtain the required pressure in the control room during the control room envelope pressurization test, has masked hardware deficiencies which have caused or contributed to this inoperable safety system.

Violation I.C.2 is discussed in the following section of this enclosure.

D.

Testina Safetv-Related Systems Violations In NRC's view, the violations associated with NPP0's failure to adequately test safety-related systems (Violations I.A.2 I.B.2, and I.C.2), a failure common to all three problems, represent deep-seated issues, indicative of a collapse in the test control program at CNS.

Test control program failures. include:

ina structures, systems, and components; long ppropriate preconditioning of standing surveillance procedure deficiencies that the CNS staff either did not recognize or had accepted, and resulted in a failure to demonstrate system operability; components that were required to be tested by the plant TS or NRC regulations but were never tested; cad a failure by NPPD management to ensure that corrective actions for past similar surveillance-related problems were adequate to prevent recurrence.

As a result, NRC is citing test control program violations as a part of each of the three identified problems, i

l i

]

u

~

- c...

Nebraska Public Power District DISTRIBUTION:

SECY CA

'JTaylor, EDO JMilhoan, DEDR JLieberman, OE MSatorius, OE LJCallan, RIV WRussell, NRR RZimmerman, NRR LChandler, OGC JGoldberg, OGC Enforcement Coordinators RI, RII, RIII, RIV FIngram, OPA LTremper, OC DWilliams, OIG EJordan, AE00 JFitzGerald, 01

-EA File (2)

NUDOCS RIV DISTRIBUTION:

LJCr.llan JMontgomery ABBeach*JDyer TPGwynn>TWesterman SJCollins*RScarano PHarrell*TReis RKopriva, SRI, CNS JGilliland CHackney WBrown GSanborn*EAFile RWise

'LWilliamson i

RIV Files MIS Coordinator 1

'f; UNITES $TATES

[ [gCE4 $g NUCLEAR REGULATORY COMMISSION

,j ;-

9 jy y

j RE2CN IV 611 RY AN PLAZA DRIVE.SulTE 40c o~

[

AR LINGTON, TE XAS 76011 8064 SEP 261994 Docket:

50-298 License: DPR-46 Nebraska Public Power District ATTN: Guy R. Horn, Vice President - Nuclear P.O. Box 499 Columbus, Nebraska 68602-0499

SUBJECT:

ENFORCEMENT CONFERENCE This refers to the enforcement conference, conducted on September 16, 1994, at the Region IV office in Arlington, Texas, concerning activities authorized by NRC License DRP-46 for the Cooper Nuclear Station.

The meeting was attended by those on the attached Attendance List, The subjects discussed at this meeting are described in the enclosed Meeting Summary.

It is our opinion that this meeting was beneficial and has provided a better understanding of the apparent violations identified in NRC Inspection 50-298/94-14, 16, and 19 and your corrective actions.

Your Reports staff's professionalism and candor during the meeting was greatly appreciated.

Any enforcement actions taken as a result of the meeting will be addressed in separate correspondence.

In accordance with Section 2.790 of the NRC's " Rules of Practice," Part 2, Title 10, Code of Federal Regulations, a copy of this letter will be placed in the NRC's Public Document Room.

Should you have any questions concerning this matter, we will be pleased to discuss them with you.

Sincerel,

L)

I.BillBeach, Director Division of Reactor Projects Attachments:

1.

Attendance List 2.

Licensee Presentation cc:

Nebraska Public Power District ATTN:

G. D. Watson, General Counsel P.O. Box 499 Columbus, Nebraska 68602-0499

~i.,e

.o

_. o n

[ '

-Nebraska Public Power District Nebraska Public Power District

!ATIN: John Mueller, Site Manager-P.O. Box 98

.Brownville, Nebraska' 68321 Midwest Power ATTN:

James C. Parker, Sr. Engineer 907 Walnut-Street-P.O. Box 657 Des Moines, Iowa 50303 Lincoln Electric System ATIN:

Mr. Ron Stoddard lith and 0 Streets Lincoln, Nebraska 68508 Nebraska Department of Environmental Quality ATTN:.Randolph Wood, Director P.O. Box 98922 Lincoln, Nebraska 68509-8922 Nemaha County Board of Commissioners ATTN: Larry Bohlken, Chairman Nemaha County Courthouse 1824 N Street Auburn, Nebraska 68305 Nebraska Department of Health ATTN: Harold Borchert, Director Division of Radiological Health 301 Centennial Mall, South P.O. Box 95007 Lincoln, Nebraska 68509-5007 Department of Natural Resources ATTN:

R. A. Kucera, Department Director of Intergovernmental Cooperation P.O. Box 176 Jefferson City, Missouri 65102 Kansas Radiation Control Program Director

c

.s Nebraska Public Power, District g bcc to DMB (IE45) bec distrib. by RIV:

L. J. Callan Resident Inspector Brai.ch Chief (DRP/C)

Leah Tremper, OC/LFDCB, MS: MNBB 4503 Mid System ORSS-FIP8 Branch Chief (DRP/TSS)

Project Engineer (DRP/C)

.RIV File Senior Resident Inspector - River Bend Senior Resident Inspector - Fort Calhoun K. Perkins, 0:WCF0 J. Gilliland, PA0 C. Hackney, RSLO i

RIV:0R C:DRP/q DhRP RCSte b f P)#dh dBN 9/fd94 9MI 9 & /94 N

ATTACHMENT A

{,o :

E.NFoF4EMERT bfEREccE. 0/ NPP)

MEETING:

Aveoze,ar heur< os ax1*c.xms, coer e

SUBJECT:

Roota Emet.dpe.

  • E26s 6g6MPEfL b \\tF)L DATE:

PNDAMCEJ_!cT (PLEASE PRINT CLE LY) bRGANIZATION POSITION TITLE NAME 3

.NARRblL-N R.L-Ca,er. Baaxa c. bee M StaW

/JAC

$2 h

D/LS '

4.Au.t.lAmu witc.

riv i?,ar= eer L. M

'A v A u nrac.

LIV 62cmw douoamrace.

\\

l luu Mogicousry AIRC ElY QPUTY IMEld4AL.dD'*dW48tC UtLLmm

'BEc. nee 10 0c. MPA.- DbsLI-l Dngteer PD IU"1 g aia W ne c.a. tL&

au w 22 Ahnotu xve 22 Tr".o.e Pr.rwur Zarnw dls vx.

~3,A. /tM L.-

N/c AI M

? m PhTec NWW-votet

$$ $97N 1lhl0b bec bsiinN,f bvbd

/fsetAr Ow ry NApn

& < a 4 f.x:,n w # N As.t obw Muo II o Q A>SPD Tde m o me, M.T. 60YCE gypto DrsM C.M 9eseact 5%rr s A"4oo.

11A M

/tMl't*06/. saAwutuo a r A.m A mi L e.a Mra,m, 4,,-

b.:

0sA U TA M AEN NPO hsn'w $$lbandse fd eet.

J J

f (All e <

A/fPD t 4. cl G,, e

- S e

(.,,,

e,, 9,

)

M'M > P P M S-NffD LAbwWrNb P9CbS. SMW 4-.

ZoM C> /fe%st bJ Alff0 GNcoUCcA,dc MJMuot

+

j._

r.s

. -r._ 7 4y l _ j'

't L

CI j.

o ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY flebraska Public Power District Cooper fluclear Station i

TIME /DATE september 16, 1994 at 9 a.m.

MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)

ORGANIZATION TITLE NRC ATTENDEES 16 tsT !

[,

(.c o Set hnicak

$5 N vu? SocM gr&

/?csijd-b8S faurex

[prpeerce.

Su k oo cak CGC jrei c, d c _J OM J

J

\\C.REN Mx, 3 rG 00 9 - W lueu Eh'G (Acnm, Yea-r:xx'A'jksJa W/ m M C 3 % u..r D,a vt/ - Diz P n?-

v

.c

/butar b frevoAC ?

Lucce s Ser.

v. n,

!^!/c /=

.-% : vw r

~P<enes S~<~n a hik><ci Pomc Mu s pi k Jear %1s.

N Y~ A 97DIEduS QFfice af Eu % m-E W % g y S f c-e i g is y-W Af N c t. W Aesc it RE611 - De P RE5t der # M5 Pang -(95 bN L ttttT 2M 10 WS dchn=3 #4M n Gckos-

  • r ENFORCEMENT CONFERENCE ATTENDANCE

+

LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE september 16, 1994 at 9 a.m.

MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)

ORGANIZATION TITLE ATTENDEES

& bhhv7?N ftY-EbioY 'l fh r N l

/

ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE September 16, 1994 at 9 a.m.

MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)

ORGANIZATION TITLE LICENSEE ATTENDEES lemzo A Sess45 Ne3 Pm'PmT,h s m a 3/v /Vfp. Q A l's,~ c.,

G. J< ass t)en A s e,e ers., k.-

a mn k,, &arpreur-

ENFORCEMENT CONFERENCE ATTENDANCE LICENSEE / FACILITY Nebraska Public Power District Cooper Nuclear Station TIME /DATE September 16, 1994 at 9 a.m.

MEETING LOCATION Training Conference Room EA NUMBER EA 94-164, EA 94-165, EA 94-166 NAME (PLEASE PRINT)

ORGANIZATION TITLE ATTENDEES hG bh'Y ki khAy NWCO{Itl Eled.S>sh hinha {o y

e i

.a 4

ATTACHMENT 2.

NEBRASKA PUBLIC POWER DISTRICT NUCLEAR REGULATORY COMMISSION - REGION IV ENFORCEMENT CONFERENCE NRC INSPECTION REPORT NOS. 50-298/94-14, 16,19 SEPTEMBER 16,1994 H

j d

AGENDA 1.

INTRODUCTION / OVERVIEW J. MUELLER II.

DISCUSSION OF ISSUES /

ISSUE-SPECIFIC CORRECTIVE ACTIONS A.

CONTROL ROOM ENVELOPE S.FREBORG B.

CONTAINMENT PENETRATIONS M.BOYCE C.

UNDERVOLTAGE DEVICES D. BUMAN 111.

CLOSING REMARKS J. MUELLER l

l M - - - - -

l L

1 9

4 4

W E

IVR EV R

E O

L

/

M2 L

N E

O U

IT M

C U

J D

O RT h

N I

4

n 1

4 DISCUSSION OF APPARENT VIOLATION CONTROL ROOM ENVELOPE S.FREBORG.

1 H 1

j CONTROL ROOM EMERM4CY FILTER SYSTEM CHRONOLOGY April 11,1994 Control Room Emergency Filter System declared inoperable to perform 1

preventive maintenance on envelope boundary door.

J April 11,1994 Surveillance Procedure 6.3.17.18,." Control Room Envelope Pressurization Test," performed -- test failed - LCO 3.12.A.3 allows continued plant operation for 7 days.

April 11-Repair efforts performed; re-test did not pass.

April 18,1994 April 18,1994 NRC grants 14 day extension to LCO 3.12.A.3.

April 18-Leak repair efforts conducted.

April 25,1994 April 25,1994 STP 93-257 performed to quantify interaction between the Control Room Envelope and plant areas that share common boundary conditions.

April 28,1994 S.P. 6.3.17.18 completed satisfactorily.

April 30,1994 CREFS declared operable.

t May 25,1994_

CNS shutdown due to undervoltage device tie-rap issue.

H L,

o

.c l

l CONTROL ROOM EMERGENCY FILTER SYSTEM ' CHRONOLOGY June 22,1994 S.P. 6.3.17.18 revised to include administrative and operability acceptance l

criteria.

June 23,1994 Test performed on Control Room Envelope emergency mode -- failed l

l administrative criteria; satisfied operability criteria; CR initiated.

l July 7,1994 Technical meeting between Nebraska Public Power District and the Nuclear Regulatory Commission Regarding Control Room Emergency Filter System.

l

~ -

CONTROL ROOM ENVELOPE APPARENT VIOLATION 94-19-01 Technical Specification 3.12.A.1, " Control Room Emergency Filtration System" (CREFS) was not satisfied in that the CREFS could not meet its intended design function (i.e., maintain a positive pressure). Therefore, the Control Room Emergency Filter System, which provides air flow to maintain a positive pressure in the Control Room Envelope, was inoperable from 1989 to 1994.

DISCUSSION:

The surveillance procedure was inadequate.

e The maintenance program to maintain the Control Room Envelope was inadequate.

e Lessons learned from secondary containment issue were not adequately applied to the e

Control Room Envelope.

Engineering assumptions regarding design basis were nonconservative.

While licensee personnel manipulation of pressures in adjoining buildings to obtain the required pressure in the Control Room did not violate procedures, it was an unacceptable practice.

H.

/

CONTROL ROOM ENVELOPE (CONT)

APPARENT VIOLATION 94-19-01 SAFETY SIGNIFICANCE:

Operator doses would have remained within GDC 19 and Standard Review Plan, Section e

6.4 Limits based upon analysis of projected unfiltered inleakage.

REGULATORY SIGNIFICANCE:

Continuing failure by NPPD to adequately address Control Room Emergency Filter System o

deficiencies.

MITIGATING FACTORS:

e NPPD identified this deficiency and pursued necessary resolution.

CORRECTIVE ACTIONS:

e Hardware modifications.

e Safety culture improvements.

H. _ _ - _ - _ - - -

CONTROL ROOM ENVELOPE (CONT)

CORRECTIVE ACTIONS STATUS CAUSE:

INADEQUATE DESIGN WITH INSUFFICIENT MARGIN.

ACTION (Short Term):

Install 1000 CFM capacity emergency fan to Modification to be installed upon approval of required increase the pressurization margin within the Technical Specification change, which is expected the existing capability of the filter.

first week of October.

ACTION (Lona Term):

Implement necessary modifications as a result Control Room Habitability System Design Criteria of the completion of the Control Room Document scheduled for completion 9-30-94. Submit l

Habitability System design criteria document.

EWR for any necessary modifications by 10-15-94.

H 8-

s CONTROL ROOM ENVELOPE (CONT)

CORRECTIVE ACTIONS STATUS CONTRIBUTING FACTORS:

INADEQUATE PM FREQUENCY FOR INSPECTION AND LUBRICATION OF DOOR SEALS.

SENSITIVITY OF EXISTING DESIGN TO PROPER BALANCE BETWEEN CONTROL ROOM AND CABLE SPREADING ROOM NOT RECOGNIZED.

LEAK PATHS CREATED DUE TO INADEQUATE WORK INSTRUCTIONS.

DOORS OPENING IN WRONG DIRECTION (POSITIVE PRESSURE TENDS TO DISENGAGE

')OOR FROM DOOR SEAL).

INADEQUATE TURBINE BUILDING DP SENSOR MAINTENANCE.

H

.g.

o CONTROL ROOM ENVELOPE (CONT)

CORRECTIVE ACTIONS STATUS ACTIONS:

Increase frequency of Control Room envelope Complete.

door seal PM (07678) to weekly Revise Procedure 7.0.1/7.0.5 to ensure that all Complete.

maintenance activities that relate to Control Room envelope doors or penetrations or that affect adjacent area HVAC Systems (listed in S.P. 6.3.17.18) flow rate or balance; include PMT requirements to perform 6.3.17.18.

i i

M '.

m m

__m__.

m-m - m==

.u.

s CONTROL ROOM ENVELOPE (CONT)

CORRECTIVE ACTIONS STATUS Record the flow rates for all flow paths in the This item is being re-evaluated. The implementation of Control Room Ventilation System during both DC 94-262 may negate the need to implement this normal and emergency modes of operation to corrective action.

provide a baseline for future system balancing.

Evaluate if a revision to design review checklists Scheduled for completion 10-31-94.

in CNS Procedure 3.4.6 is needed to provide more appropriate questions to ensure that the Control Room pressure boundary requirements are adequately addressed in DCs.

Revise 6.3.17.18, as necessary, to control all Complete.

variables in a manner to ensure consistent test results that are representative of the limiting post-accident conditions.

Evaluate the possibility of caulking the inactive Complete. Evaluation indicates caulking is l

leaf on doors H3OO, N305 to reduce leakage unnecessary.

through the seals.

e increase the frequency of performance of S.P.

Complete.

6.3.17.18 from once per cycle to monthly.

H

~

-11_

i CONTROL ROOM ENVELOPE (CONT)

CORRECTIVE ACTION (S)

STATUS Develop a PM to inspect outside air sensing line Complete.

filters on an annual basis for filter element plugging and gasket Isaks. The sensing lines should be blown out at the same time and inspected for leaks or damage.

Evaluate the use of a more accurate manometer Complete. Evaluation concludes that existing for all future S.P. 6.3.17.18 testing. If use of manometer should be retained for S.P. 6.3.17.18.

the present manometer is continued, a more rigid mounting method should be determined.

Investigate the possibility of replacing door Complete. Replacement of this door is unnecessary H200 with a door that swings inward.

due to the low dP experienced.

l l

M.

.1 CONCLUSION Control Room Envelope could not consistently satisfy design function.

e Adequate corrective actions have been taken to address hardware issues.

e Hardware modifications will significantly increase available margin.

e Steps have been taken to improve the safety culture.

l l

H l.

i i

T

' ' ~ ' '.

i'

~

DISCUSSION OF APPARENT VIOLATIONS CONTAINMENT PENETRATIONS M.BOYCE i

l M '

t CHRONOLOGY OF PENETRATION ISSUES June 17,1993 Inspection Report 93-17 issued.

October 12,1993 Notice of violation and proposed imposition of civil penalty from IR 93-17.

Level IV violation for failure to have an appropriate rationale for reverse direction testing.

Level IV violation for failure to leak rate test the internals of the hydrogen / oxygen analyzers.

November 12,1993 District response to IR 93-17 made commitment to conduct a

" detailed review of all containment penetrations and their associated Appendix J testing requirements... Prior to startup from the next refueling outage."

i i

December 2,1993 Memo from R. E. Wilbur to K. C. Walden directing that the design basis reconstitution for the Primary Containment System be expedited.

January 1994 Work started on Primary Containment design basis document.

H - - -

a i.

CHRONOLOGY OF PENETRATION ISSUES February 1994 Development of Primary Containment walkdown procedure started (SP 94-202).

May 17,1994 SP 94-202, Primary Containment walkdown procedure approved.

May 18,1994 SP 94-202 walkdown started.

May 27,1994 Plant in cold shutdown due to Electrical Distribution System concerns.

June 2,1994 CR 94-241 written due to discovery of penetration X-218.

June 6,1994 CR 94-261 written due to discovery of penetration X-209A-D.

1 i

June 6,1994 Started review of as-built containment penetration information.

l June 11,1994 CR 94-286 written documenting numerous design and testing concerns with Primary Containment.

H '.

h

.i CHRONOLOGY OF PENETRATION ISSUES June 11 through Continued review penetration-by-penetration of containment June 20,1994 design and testing.

June 14,1994 Presentation to NRC Region IV on Primary Containment.

June 20,1994 CR 94-0325 written to document tilN and IVP piping penetrating Primary Containment.

June 21,1994 CR 94-0377 Written to document failure to leak rate test pressure instruments.

June 23,1994 CR 94-0378 written to document LLRT failure of IA-65CV.

June 27,1994 Technical presentation to NRR and Region IV in Rockville.

Jul; 29,1994 NRC Management Meeting.

H :..

CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 1 APPARENT VIOLATION Containment isolation valves that existed in the plant were not shown on flow diagram No. 2028, " Reactor Building and Drywell Equipment Drain System," revision N27. Flow diagram No. 2028 was not included on the safety-related drawing list in accordance with Cooper Nuclear Station Engineering Procedure 3.8, " Drawing Control Procedure,"

Revision 7.

NRC identified this as Example 1 of an apparent violation of 10 CFR 50 APPENDIX B, Criterion 111.

DISCUSSION:

The District violated Procedure 3.8 in that the drawing list was incorrect.

Did not affect control of safety-related drawings.

Reason for list was as-build project scope (2028 should be on list).

Procedure 3.7 controls distribution of safety-related drawings.

Other parts of Procedure 3.8 control revision.

There were 5 valves not shown on drawing 2028.

4 Manual instrument air valves to AOVs in drywell.

1 Manual valve on vent line.

H '.

~

CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 1. EXAMPLE 1 SAFETY SIGNIFICANCE:

No effect on component classification or drawing revision, content, distribution, or use.

Procedure 3.13 Controls classification.

e Did not affect treatment of any safety-related component (maintenance, testing, design, etc.).

Engineering Date File (EDF) Provides component classification for work / design control.

Manual vent valve was shown on a drawing but was not shown in the correct configuration.

Two valves and cap shown vs. one valve and cap actual.

The instrument Air Valves are on other drawings and in EDF and controlled by operating procedures.

e Minimal safety significance.

H -- -

CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 1. EXAMPLE 1 REGULATORY SIGNIFICANCE:

Had 2028 been on the list, it would have been in as-built verification project.

Should have recognized and corrected the deficiency in Procedure 3.8.

MITIGATING FACTORS:

The District identified the drawing errors during the containment walkdown.

There was no impact on safety-related drawing control due to the missing drawing on the Procedure 3.8 list.

CAUSE:

Insufficient management oversight and guidance.

Recognized drawing list discrepancies and failed to take corrective actions.

Failed to establish an adequate program to identify correct drawing scope.

CORRECTIVE ACTIONS:

e Revising Procedure 3.8.

H '.

,J CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 1 CORRECTIVE ACTION (S)

STATUS CAUSE:

INSUFFICIENT MANAGEMENT OVERSIGHT AND GUIDANCE.

ACTIONS:

Revising Procedure 3.8.

Procedure change in progress.

l l

t M. -

i

~

wCW V

C C

.:m:

O 3

U O

E 3

g a

Q O

C y

5 oU m

i H

C g

3 C

O V

2 O

C I

C G

e w

  • D N

C C

.C N

8

.t W

2 MJ m

3 2 1 C

m e

OE 3

g 2

m gN m

g i

E C

l W

O O

y j

a O

A l

N e

W O

E2 C

C e

.C

.9 5

3 Wq 1-3 E=

e u

n

~~

w n

O C w

es g

-O a

e e

'O C

W "$;

  • C

=

C.

y E

Ce b

"O d-Q=

9.t e=

c gx EU 8

2. >b

.6 W

C 0)

  • a g' m

C 4

O 5

9 2 53 m

E

  • d Z W O *4 Ea

~E S'

4 o

e C

=

a Og ss Ca 8

8 3

$ <1 3a e

CO 1

..e e

C r

3 O

2 O_

) C.

t. o.

a a

e H

  • E "k

~

C a

4 0

m C

e.C C

E O

a O

D$

h a

o

  • ~ C o

C eO O c-2 g

S O

~

m E

W U m

z Eg EO 9

3

.E 56 p

=

.C v W

m sC

    • E O

M O

4 J C O 'C D

r m

m "C f

E 9t O

s M

O Q.

e

$O W

D L

r re es s

l

~~

.f CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 2 SAFETY SIGNIFICANCE:

e MISSING CAPS Each of the 13 cases of missing caps had a normally closed manual valve in the line.

Each of the manual valves had either been tested during the ILRT or would not be exposed to containment atmosphere.

SINGLE VALVES Each of the 30 single manual valves either was not in direct communication with the containment atmosphere or was ILRT tested.

As-found LLRTs successful.

THERMOCOUPLES Subjected to ILRT pressure.

Passed an as-found LLRT (cumulative leakage 0.11 SCFH).

Passive barriers.

l i

H j 1

CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 1. EXAMPLE 2 REGULATORY SIGNIFICANCE:

Result of original design and should have been identified sooner.

e Lack of appropriate procedural controls on manual valves and caps.

e MITIGATING FACTORS:

identified as a result of broad corrective actions for IR 93-17 violation.

e Single manual valve isolation resulted from the DISTRICT'S original Licensing position e

on Safety Guide 11 as provided in FSAR Question 5.5 and as included in the FSAR.

The DISTRICT does not consider this an acceptable position to meet the containment design objectives.

Original plant design, not design change process.

o I

l l

H '.

^

CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 1. EXAMPLE 2 CAUSE:

Failure to look beyond the requirements of the USAR to identify the appropriate design e

requirements for these containment penetrations.

CORRECTIVE ACTION:

e Review each penetration to ensure safety function can be achieved and resolve discrepancies.

Expedite design basis reconstitution.

e l

l H

-25.

}

CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 2 CORRECTIVE ACTION (S)

STATUS CAUSES:

FAILURE TO LOOK BEYOND THE REQUIREMENTS OF THE USAR TO IDENTIFY THE APPROPRIATE DESIGN REQUIREMENTS FOR THESE CONTAINMENT PENETRATIONS.

ACTIONS:

Resolve primary containment penetration configuration Complete; problems identified as part of the Primary and Appendix J problems: ensure compliance to the Containment walkdown have been resolved by design design / licensing basis and Appendix J.

or testing program changes. Primary Containment manual valves and caps have been marked to be readily identifiable in the plant and are controlled in Procedure 2.0.2.

Review containment penetration configurations to Complete; review performed from walkdown findings, ensure that the safety functions as assumed in the and design changes implemented as required.

safety analysis can be provided by the as-built penetrations.

Accelerate the Design Basis Reconstitution effort with System prioritization complete. Bids being evaluated ria significant safety systems given priority.

for expedited DCDs.

H

  • CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 3 APPARENT VIOLATION:

The Licensee identified approximately 300 examples of components associated with the containment penetrations which were not classified as essential.

The failure to design, fabricate, and erect the containment isolation barriers to quality standards that reflect the importance of the safety function was identified as an apparent violation of 10 CFR 50, Appendix B, Criterion Ill.

DISCUSSION:

46 penetrations where piping was classified lilN, IVP or indeterminant.

The 46 penetrations involved 262 socket welds and 35 butt welds (297 total).

H.

~

t w

c.

i CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 1. EXAMPLE 3 SAFETY SIGNIFICANCE:

All 262 socket welds passed liquid penetrant examination.

5 of the 35 butt welds showed rejectable indications, but were analyzed and e

determined to have been acceptable.

The District did repair or remove each of these welds.

Results of the NDE verified that the as-found condition of piping was acceptable.

REGULATORY SIGNIFICANCE:

Adverse condition existed for significant amount of time.

H

  • 9

.a e,

a CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 1. EXAMPLE 3 MITIGATING FACTORS:

identified by the District as a result of broad corrective actions taken in response to IR e

93-17 violation.

Review of piping classification resulted from expanding the issue to ensure it was e

bounded.

e Misclassification, not a hardware concern.

Caused by original design, not introduced through design change process.

e CAUSE:

Focus on system function over containment function resulted in original design error.

e H -

CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 1. EXAMPLE 3 CORRECTIVE ACTION:

Reviewed each containment penetration to ensure proper classification.

e Reviewing ASME Section XI classification boundaries to identify any similar problems.

e H -

CONTAINMENT PENETRATIONS APPARENT VIOLATION 1. EXAMPLE 3 CORRECTIVE ACTIONS STATUS CAUSES:

FOCUS ON SYSTEM FUNCTION OVER PRIMARY CONTAINMENT FUNCTION FOR AFFECTED PIPING RESULTED IN ORIGINAL DESIGN ERROR OF FAILURE TO TRANSLATE PRIMARY CONTAINMENT DESIGN SPECIFICATIONS INTO THE PIPING SPECIFICATION.

ACTIONS:

Identify welds in penetration-attached piping for Complete; welds have been identified, construction which original construction NDE was insufficient.

NDE performed as required, and design documents updated as applicable in accordance with DC 94-212J.

e Review ASME Section XI classification in progress; a draft Section XI classification boundary boundaries to identify other potential pressure basis has been developed and is in engineering review.

boundary classification errors.

H.

CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 APPARENT VIOLATION:

The Licensee determined that the containment isolation valves in 54 penetrations had not had type c local leak rate tests performed on 68 of the components passing through the penetrations. The systems associated with these valves were classified as nonessential.

However, the containment isolation valves were required to function to prevent the release of the post-accident containment atmosphere.

The failure to perform Type C Local Leak Rate Tests was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.

DISCUSSION:

64 total penetrations identified involving 82 components where Type B OR C LOCAL e

Leak Rate Testing had not been performed.

57 penetrations involving 75 valves (Type C).

e e

7 Penetrations involving 7 seals (Type B).

H.

i e

e CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 i

SAFETY SIGNIFICANCE:

e Valves 28 of 64 penetrations had caps in addition to a single manual valve.

23 of 64 do not connect directly with containment atmosphere.

5 of 64 penetrations were TIP lines.

1 OF 64 was post accident sampling.

As-found LLRTs pass.

e Seals 7 of 64 involve passive seals (flanges and sealant compounds).

All passed as-found LLRT testing except for IA-65CV (LATER - SEE EXAMPLE 2).

e H - - - -

1 CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 REGULATORY SIGNIFICANCE:

Violation of 10 CFR 50 Appendix J, Section Ill.D.2 and 3.

MITIGATING FACTORS:

District identified as a result of broad corrective actions taken in response to IR 93-17 Violation.

Resulted from expanding issue to bound problem.

CAUSE:

inadequate monitoring and management of Appendix J Test Program.

e H.

i i

+

CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 CORRECTIVE ACTIONS:

Resolved design and testing problems.

e l

Established Appendix J Program owner and developing Appendix J Program Basis e

Document.

i l

M t

s i

CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 1 l

1 l

CORRECTIVE ACTIONS STATUS CAUSES:

l l

e INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM ACTIONS:

Resolve Primary Containment penetration configuration Complete; problems identified as part of the primary and Appendix J problems; ensure compliance to the Containment walkdown have been resolved by design design / licensing basis and Appendix J.

or testing program changes. Primary Containment isolation components which were not previously Type B or Type C tested have been tested as required and added to the Appendix J test program.

Establish an Appendix J Program Owner.

In progress; a program owner has been assigned and an Appendix J testing basis document is being prepared.

H,

i i

i.

CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 APPARENT VIOLATION:

The total leakage of the Local Leak Rate Tests performed on components previously not tested exceeded the Technical Specification limit for leakage to ensure containment integrity.

This was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.

DISCUSSION:

Total leakage, excluding lA-65CV less than Technical Specification limit.

IA-65 CV could not be pressurized in the as-found condition.

Bench testing could not reproduce the excessive leakage.

e Used conservative method to determine estimated leakage.

H. - - -

i.i..

/

CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 SAFETY SIGNIFICANCE:

Calculated dose to control room and offsite within limits.

X-22 penetration containing lA-65CV is closed loop inside containment and outside containment; likelihood of large leak concurrent with core damage accident very low (1 E-11).

Even assuming a major leak from X-22, doses within limits.

REGULATORY SIGNIFICANCE:

Condition existed for extended time.

An adequate test program would have discovered and corrected this problem.

The aggregate consequences could have been significant if total leakage had been higher.

t M.

S r

- 6 CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 2 MITIGATING FACTORS:

District identified as a result of broad corrective actions taken in response to IR 93-17 e

violation.

Minimal effects on consequences of an accident while it existed.

CAUSE:

inadequate monitoring and management of Appendix J Program.

e CORRECTIVE ACTIONS:

l Resolved containment design and testing problems, including IA-65CV.

e Established Appendix J Program owner and developing Appendix J program basis I

e document.

H -

CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 2. EXAMPLE 2 CORRECTIVE ACTIONS STATUS CAUSES:

INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM.

ACTIONS:

Resolve Primary Containment penetration Complete: problems identified as part of the Primary configuration and Appendix J problems; ensure Containment walkdown have been resolved by design compliance to the design / licensing basis and or testing program changes. IA-CV-85CV was Appendix J.

replaced and the penetration modified to include two check valves in series. A Type C test was performed on this configuration with satisfactory results.

Establish an Appendix J program owner.

In progress; a program owner has been selected and an Appendix J Testing Basis Document is in the course of preparation.

H -

l

.e CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 APPARENT VIOLATION:

The failure to perform local leak rate testing for several instrument pressure switches was identified as an apparent violation of Technical Specification 4.7.A.2.f.1.

l l

l DISCUSSION:

involved 15 pressure instruments normally exposed to containment atmosphere that e

l were valved-out during ILRT performance.

These instruments perform containment isolation, ECCS initiation, and SCRAM e

functions.

_ SAFETY SIGNIFICANCE:

e Each instrument successfully LLRT tested.

All perform their safety function at low containment pressure <2 PSIG and would e

actuate prior to peak accident pressure.

H - - - - -

i CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 REGULATORY SIGNIFICANCE:

o Condition existed for extended period.

MITIGATING FACTORS:

District identified as a result of broad corrective actions taken in response to IR 93-17 e

violation.

e Resulted from expanding issue to bound the concern.

The instruments were found to be leak tight and capable of performing their e

containment boundary and system safety functions.

CAUSE:

Inadequate monitoring and management of Appendix J Program.

H.

s CONTAINMENT PENETRATIONS APPARENT VIOLATION 2. EXAMPLE 3 CORRECTIVE ACTION:

Resolved containment design and testing concerns.

Established Appendix J Program owner and developing Appendix J Program basis e

document.

H -

i CONTAINMENT PENETRATIONS (CONT)

APPARENT VIOLATION 2. EXAMPLE 3 CORRECTIVE ACTIONS STATUS CAUSES:

INADEQUATE MONITORING AND MANAGEMENT OF APPENDIX J TEST PROGRAM.

ACTIONS:

Resolve Primary Containment penetration Complete: problems identified as part of the Primary configuration and Appendix J problems: ensure Containment walkdown have been resolved by design compliance to the design / licensing basis and or testing program changes. Surveillance Procedure Appendix J.

6.3.1.1.2 was implemented to perform local leak rate test on the isolated pressure switches, and requisite testing was completed.

Establish an Appendix J program owner.

In progress; a program owner has been assigned and an Appendix J testing basis document is being prepared.

H.

~.

CONCLUSION The District agrees that the three examples identified as apparent Violation 1 constitute a violation of 10 CFR 50, Appendix B, Criterion 111.

The District agrees that the three examples identified as apparent Violation 2 constitute a violation of the Cooper Nuclear Station Technical Specifications.

The District has provided specific technical information for each example that addresses the safety significance and mitigating factors that relate to each violation.

While the District has determined that the specific violations may not have individually affected the health and safety of the public, it is acknowledged that the programmatic issues are significant.

The District is taking aggressive actions to address the broader issues.

H -

TIE-RAP /UNDERVOLTAGE TESTING D. BUMAN H.

i CHRONOLOGY OF DG TESTING May 16,1994 TIE-WRAP Discovered on MCC-N (CR 94-155).

DG #1 Determined to be Operable (OD 94-52).

TIE-WRAP Removed.

May 17,1994 All Other Switchgear inspected.

May 23,1994 Discovered Load Shed Not Specifically Tested.

May 25,1994 Discovered SWBP Contacts Not Tested - NOUE Declared May 26,1994 Started LSFT Review of Selected Systems i

May 28,1994 Expand Scope of Systems June 3,1994 Completed Review of LSFT June 3,1994 Started Developing TPCNs, PCNs, and Special Procedures to Test Contacts.

June 10,1994 Commenced Testing June 17-Discovered Problems With Under-Voltage Trip Devices June 20,1994 June 21-Performed Troubleshooting of UVTDs June 26,1994 J.

e26,1994 Developed Design Change to Replace UVTDs July 4,1994 Completed Modifications for Under-Voltage Tripping l

July 17,1994 Contact Testing Scope Expanded July 21,1994 Contact Testing issues Closed for DG #1 - NOUE Ends l

l l

l M,

TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARENT VIOLATION 1 Procedure 7.3.2.1 was inadequate in that it failed to provide instructions for the performance of maintenance and testing that would ensure proper operability of the breaker. The failure to provide appropriate instructions for a safety related activity is an apparent violation.

DISCUSSION:

e The procedure was inadequate.

The inadequate procedure adversely affected safety system operability.

e As-found testing in this procedure is not used to meet Technical Specification e

requirements.

The general maintenance performed in this procedure (i.e., wiping, cleaning, e

lubrication, etc.) and the subsequent test was not performed to support Technical Specification compliance, therefore, should not be considered preconditioning.

The failure of post-maintenance testing is acknowledged to directly impact the ability e

of equipment to perform intended safety function.

H "

TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARENT VIOLATION 94-16-01 SAFETY SIGNIFICANCE:

Although the installed tie-rap defeated the associated undervoltage trip Device e

(MCC-N), the diesel generator still would have performed its function.

Later calculations demonstrate the diesel generators have sufficient capacity to e

perform their intended safety function with the failure of all undervoltage devices.

REGULATORY SIGNIFICANCE Procedures were inadequate to ensure tie-rap removal and post-maintenance e

operability.

MITIGATING FACTORS:

e Self identified.

CNS personnel were on a parallel path with the NRC regarding extent of condition and e

potential safety implications.

~

H - - - - - -

TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING APPARF86T VIOLATION 94-16-01 CAUSE:

inadequate maintenance procedure.

e Inadequate post-maintenance testing.

e CORRECTIVE ACTIONS:

e Walkdowns.

Review of relevant procedures.

H -

t i

s' fe.

TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING CORRECTIVE ACTIONS STATUS CAUSE:

e INADEQUATE MAINTENANCE PROCEDURE.

e INADEQUATE POST-MAINTENANCE TESTING.

ACTIONS:

Wa!kdowns conducted to verify that no similar complete.

cable tie installations were in place. (See 7/28/94 letter to NRC, Item 5(e)1; 8/8/94 letter to NRC, Attachment 1, item A.1.).

Revicew performed of CNS mechanical and complete.

aiectrical maintenance procedures; surveillance procedures in chemistry, operations, I&C: as well as the 14.X series l&C procedures, to identify similar procedural deficiencies.

Performed a random review of I&C procedures complete.

to ensure that appropriate checks are performed when leads are lifted and landed.

H -

TIE-RAP PROCEDURE / POST-MAINTENANCE TESTING (CONT)

CORRECTIVE ACTIONS STATUS ACTIONS (CONT)

Maintenance Work Practice 5.0.4 revised to add Complete.

guidance to ensure that any impairments, changes, or blocking devices installed during performance have been removed prior to procedure completion.

Maintenance supervisors held meetings with Complete.

personnel to reemphasize need for procedural compliance and the need for immediate correction of problems related to incomplete understanding of procedural requirements.

H,

i LOAD SHEDDING APPARENT VIOLATION 94-16-02 Technical Specification 4.9.A.1.a requires that a loss of voltage test be performed to demonstrate load shedding from the emergency busses. The failure to perform a surveillance test, as required by the TS, because of inadequate procedures is an apparent violation.

DISCUSSION:

The procedure was inadequate.

e SAFETY SIGNIFICANCE:

Testing demonstrated all critical contacts able to perform their safety functions.

e Calculations demonstrated if load shedding of non-essential loads did not occur, the e

diesel generators would have performed their intended safety function.

REGULATORY SIGNIFICANCE Long-term inadequate testing has regulatory significance.

M i

j LOAD SHEDDING APPARENT VIOI.ATION 94-16-02 MITIGATING FACTORS:

The service water booster pump load shed is only required during torus cooling and e

RHR testing, which occurs during a low percentage of time.

Aggressive actions were taken to identify the extent of the deficiencies.

e Components that may not necessarily have been required were conservatively tested.

e inadequate surveillance testing for the load shedding is another example of a deficient e

procedure and should not be a separate violation.

CAUSES:

inadequate surveillance procedure.

e CORRECTIVE ACTIONS:

l l

Multi-disciplined review of OER program.

e identified and tested critical contacts.

e Evaluated and/or tested remaining contacts.

H,

i t

LOAD SHEDDING CORRECTIVE ACTIONS STATUS CAUSE:

INADEQUATE SURVEILLANCE PROCEDURE DID NOT INCORPORATE OER DID NOT FULLY ENVELOPE DESIGN BASIS ACTIONS:

Performed multi-disciplined review of the Complete.

e Operating Experience program. (See 8/8/94 letter to NRC, Att.1, item A.4.B.1.)

Identified and tested critical contacts with Complete.

automatic safety functions. (See 7/28/94 letter to NRC, item 5(d)1: 8/8/94 letter to NRC,, Jtem A.2.)

Performed evaluation and testing of expanded Complete.

scope of contacts. (See 8/8/94 letter to NRC,, item A.2.)

H.

i LOAD SHEDDING T

CORRECTIVE ACTIONS STATUS ACTIONS:

Multi-discipline team has been reviewing past To be completed prior to startup.

operating experience reviews to determine adequacy. This review includes both external and internal OER. Any safety significant items to be corrected prior to startup.

l M

-ss-

t

~.

LOAD SHEDDING CORRECTIVE ACTIONS STATUS ACTIONS:

implernent provisions to ensure that changes to interim memo issued.

e procedures are reviewed for impact on design Procedure revision due 11/1/94.

input documents. In the interim, the SRG and System Engineering will be instructed to monitor procedure changes for potential impacts to the design basis.

Revise engineering calculation procedure 3.4.7 Interim memo issued 8/24/94.

to include provisions to ensure that design Procedure revision due 11/1/94.

output documents are revised when affected by changes to calculations.

H..

i i

i LS?AD SHEDDING CORRECTIVE ACTION (S)

STATUS ACTIONS (CONT):

The District initiated a surveillance testing The validation of the surveillance procedures of the program review that will consist of an following systems to be completed prior to startup:

independent in-depth review of CNS procedures to:

ADS CS 1)

Determine if the level of testing is HPCI adequate.

LPCI RPS 2)

Verify procedures are in place to perform all required testing.

3)

Provide recommendations for program Scheduled for completed 4/95.

and/or procedure improvement.

H -

i e,.

LOAD SHEDDING

-x CORRECTIVE ACTIONS STATUS ACTIONS (CONT):

As-found tested 4160 and 480 volt complete.

undervoltage devices in breakers that supply electricalloads directly from emergency busses 1F and 1G. (See 7/28/94 letter to NRC, item 5(c)1.)

complete.

Revised 6.3.4.3 to ensure it adequately demonstrates load shedding and sequential loading of the EDGs Extensive actions taken to provide adequate complete.

assurance that logic system functional testing at CNS is adequate. (See 7/28/94 letter to NRC, item 5(g); 8/8/94 letter to NRC, Attachment 1, item A.2.)

Comprehensive evaluation of the Electrical complete.

Distribution System performaid to ensure that problems were enveloped. (See 8/8/94 letter to NRC, Attachment 1, item A.4.)

i H

~ I

i DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 Technical Specification 3.9.A.1.b requires that both EDGs shall be operable. As a result of the EDGs not being capable of supplying sufficient power for vital electrical loads, the EDGs were not operable because they could not perform their intended design function.

DISCUSSION:

The EDGE would have performed as designed regardless of unreliable UVT devices.

A failure to properly load shed would not have aggravated the consequences of any other known deficiency.

Other deficiencies are the mis-adjustment of the 59 relay (IR 93-28) setpoint and the setpoint drift of the 27X3-1G device.

H,

i DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 59/27X3 CUMUl_ATIVE EFFECT DG1 DG2 59 Relay setpoint July 93 59 Relay setpoint (End of Outage)

Improperly raised.

Improperly raised.

27X3-1F measured at 27X3-1G measured at 10.48 seconds.

9.84 seconds.

November 93 59 Relay setpoint 59 Relay setpoint corrected.

corrected.

27X3-1F measured at 27X3-1G measured at June 94 10.69 seconds.

14.46 seconds.

Worst case cumulative effect of the 59 relays and the excessive drift of 27X3-1G precludes an analytical determination that the DG2 output breaker would have automatically closed upon an initiation signal.

DG1 remained unaffected.

DG2 output breaker could have been manually closed in accordance with emergency procedures.

H.

x DIESEL GENERATOR OPERABILITY -

APPARENT VIOLATION 94-16-03 l

l SAFETY SIGNIFICANCE:

l TIE-WRAP /UV DEVICE:

l Both diesels were capable of performing their intended safety function even if all non-essential loads remained on the bus (were not load shed).

27X3/59 RELAY INTERACTION:

The cumulative effect of the improper high voltage permissive setpoints and the drift l

e of 27X3-1G, along with all other worst case drifts and timing inaccuracies could have prevented the DG2 output breaker from automatically closing during a DBA from June to November 1993.

EOPs require operators to confirm that DG is operating properly.

e DG2 output breaker could have been manually closed.

o The concurrent worst case drift by all relays is extremely unlikely.

e Voltage permissive relays were properly set in November of 1993.

o Successful sequential load test demonstrated the proper function on July 14,1993.

e e

DG1 remained operable.

H.

m m--

. a DIESEL GENERATOR OPERABILITY APPARENT VIOLATION 94-16-03 REGULATORY SIGNIFICANCE:

Need for additional analysis.

MITIGATING FACTORS:

Tie-Wrao Undervoltage issues:

Self identified.

Broad and extensive corrective actions already discussed.

27X3/59 Relav Interaction:

Self identified.

CAUSE:

Cause has been addressed in that this violation is the result of previous violations already discussed.

CORRECTIVE ACTIONS:

Relay 27X3-1G reset.

e Increased surveillance frequency.

H -

l c.,

CONCLUSION These issues were self identified.

The preventative maintenance procedure that installed the tie-rap was deficient.

The load shed surveillance procedure was deficient.

The procedure deficiencies should be considered two examples of the same violation.

The UVT devices failing to trip did not render the diesel generators inoperable.

The interaction between the improperly set 59 device and the drift of the 27X3-1G relay resulted in DG2 operability being indeterminant for the period from July To November 1993.

The load shed issues and the more recently discovered relay issue are independent.

M

).

4

\\

3 e

e I

SKR R

A E

L M

L M6 E

E R

U 5

G M

N H

IS O

J LC I

1l

t q

s

... r2 CLOSING REMARKS Violations reinforce the need for strong corrective actions beyond individual issues.

e Must improve fundamental knowledge and set high standards for staff.

e Safety Culture Training.

Field Coaching Team.

Focus of management expectations.

SORC effectiveness.

Strong and involved QA.

Instinctively making correct choices.

Being self-critical.

Problems are know, priorities and action plans are in place.

e e

Positive results to date.

H m

-m.

GENERAL OFFICE P.o. Box 499. COLUMBUS. NEBRASKA $8002 0490

' Nebraska Public Power District "TSElE2**

=_

l GUY R. HORN Vice-President. Nuclear

{

(402) 563 5518 NLS950028 i

January 18,1995

~

Director, Office of Enforcement U. S. Nuclear Regulatory Commission Attention: Document Control Desk Washington, D.C. 20555 l

Gentlemen:

Subject:

Reply to a Notice of Violation and Proposed Imposition Civil Penalties; NRC Inspection Report Nos. 50-298/94-14,50-298/94-16, and 50-298/94-19; Cooper Nuclear Station, NRC Docket 50-298, DPR-46

Reference:

Letter from Mr. J. L. Milhoan (USNRC) to Mr. G. R. Horn (NPPD), dated December 12,1994, Notice of Violation and Proposed Imposition of Civil Penalties - $300,000 (NRC Inspection Reports 50-298/94-14, 50-298/94-16, and 50-298/94-19).

This letter, including Attachments 1 and 2, constitute Nebraska Public Power District's (the District) reply to the referenced Notice of Violation (NOV) and Proposed Imposition of Civil Penalties in accordance with 10 CFR 2.201. Attachment 2 is a certified check in the amount of $300,000, for payment of the civil penalties. Per conversation with Mr. G. F. Sanborn, the submittal date of this response was extended to January 18,1995.

The referenced inspection reports document the results of three NRC inspections conducted i

from May 23 through August 12,1994, to specifically review the circumstances regarding: (1) the identification, in May and June,1994, by the Cooper Nuclear Station (CNS) staff of numerous Primary Containment penetrations that were installed in configurations that were contrary to NRC requirements and had never been local leak rate tested, (2) the extent of the conditions causing both Emergency Diesel Generators (EDGs) to be declared inoperable, which had resulted in the declaration of a Notification of Unusual Event and plant shutdown on May 25,1994, and (3) the identification by the CNS staff of numerous hardware deficiencies that resulted in the failure of the Control Room envelope pressurization test on April 11,1994, As discussed in Attachment 1 to this letter, each of the " problems" and violations had common causes relating to NPG management and culture. As you are aware, NPG l

management changes have been implemented to address these issues. The breadth of personnel changes reflect the District's commitment to incorporating broad industry / p ' L.

experience and achieving higher performance standards.

More specifically, management k

oversight of the Condition Reporting Process has been increased to ensure adequate rigor and urgency are applied in the evaluation of non-conforming plant conditions as they are

~

dwfCAh<I-( A y (f -

9501260300 ~50118 I

PDR ADOCK 05000298 PDR

_-.o

,gggg g

g.,

.p ;

r/y;g

.==

' Director, Office of Enforcement U.

S.

Nuclear Regulatory Commission January 18, 1995 Page 2 of 3 l

identified. Also, focused attention is being placed in the review of Operational Experience, a program that is considered key in early identification and timely resolution of potential issues.

Management communications have been improved through: (a) training for NPG Managers and Supervisors on important management topics including teamwork and communications,

. (b) daily management meetings to communicate priorities and standards, and to ensure inter-departmental coordination, and (c) implementation ofa revised corrective action program that provides focus on organizational, programmatic and human performance concerns.

4 In summary, the District has taken, and will continue to take aggressive actions responsive to the management issues that have negatively impacted the NPG safety culture. Steps taken that have resulted in the progress made to date have been significant, and the District believes that the CNS " culture" issue is no longer a factor with regard to the recurrence of these violations. The majority ofissues and corrective actions discussed herein have been addressed in the July 28 and August 8,1994 responses to NRC Confirmatory Action Letters (CAL) dated May 27, June 16, July 1, and August 2,1994; during the September 16,1994 Enforcement Conference; and in the November 7,1994 letter to the NRC. As such, the District has not addressed in this response, any perceived differences of opinion since the cited violations should not have occurred in any event, and since they required significant attention before CNS could be considered ready for restart.

Should you have any questions concerning this matter, please contact my office.

/ e~~

G.

.I rn Vice-sident - Nuclear Attachments cc:

Regional Administrator USNRC Region IV NRC Resident Inspector Cooper Nuclear Station NPG Distribution

s Director, Office of Enforcement U.

S. Nuclear Regulatory Commission January 18,'1995 Page 3 of 3 STATE OF NEBRASKA)

)

PLATTE

)

G. R. Horn, being first duly sworn, deposes and says that he is an authorized representative of the Nebraska Public Power District, a public corporation and political subdivision of the State of Nebraska; that he is duly authorized to submit this response on behalf of Nebraska Public Power District; and that the statements contained herein are true to the best of his knowledge and belief.

~m rL, _

G. R. Horn Nwday of d d W,1995.

Subscribed in my presence and sworn to before me this 0

M NOTARY PUBLIC

., -==

~

s to NLS950028 Page 1 of16 REPLY TO DECEMBER 12, 1994 NOTICE OF VIOLATION AND PROPOSED IMPOSITION OF CIVIL PENALTIES - EA NOS.94-164, 94-165,94-166 COOPER NUCLEAR STATION j

NRC DOCKET NO. 50-298, LICENSE DPR-46 J

During NRC inspections conducted from May 23 through August 12, 1994, violations of NRC requirements were identified. In accordance with the " General Statement of Policy and Procedures for NRC Enforcement Actions," 10 CFR Part 2, Appendix C, the Nuclear Regulatory Commission proposed civil penalties pursuant to Section 234 of the Atomic Energy Act of 1954, as amended, 42 U.S.C 2282, and 10 CFR 2.201.

For each of the violations and " problems," inadequate management performance significantly contributed to the existence or perpetuation of the deficiencies.

Therefore, management related corrective actions addressed in the cover letter to this response and in other District correspondence to the NRC (i.e., District letters to the NRC dated July 28, 1994 (NLS940001); August 8, 1994 (NLS9400026);

and November 7, 1994 (NLS940111)) should be considered part of the District's corrective actions. For brevity, this corrective action is not restated in each violation response.

The part.icular violations and the District's replies are set forth below:

PROBLEM AREA A-Primary containment Intecrity Violatigng I.

Violation A_1 Violation A.1 contained in Reference 1 cites the following:

  • Technical Specification 3. 7. A.2.a

" Containment Integrityo* states in r

o parto that

  • primary containment integrity shall be maintained at all times when the reactor is critical or when the reactor water tengperature is above 212*r and fuel is in the reactor vessel... "

" Technical Specification Rurvelliance Requirement 4. 7.A.2.f.lo " Leak Rate Testingo

  • states in parto that *... local leak rate tests (LZatTs) shall be o

performed on the primary containment testable penetrations and isolation valves at a pressure of 58 psig during each reactor shutdown for refuelingo or other convenient intervals but in no case at inte2vals no o

greater than two years....

The total acceptable leakage rate for all valves and penetrations other than the NBZVs (main steam isolation valves) is 0.60 La.

  • Technical Specification 1.Yo "Burvel11ance frequencyo
  • states in parto o

that " performance of a curveillance Requirement within the specified time interval shall constitute congpliance with operability requirements for an LCO [ limiting condition for operation) unless otherwise required by the specitication.*

  • Contrary to the above, from January 18, 1974: until May 27, 1994, primary containment integrity was not maintained at all times when the reactor was critical or when the reactor water tengperature was above 212*r and fuel was

)

in the reactor vessel in that the Burvelliance Requirement for the local leak rate teating of 82 coanponenta had never been innpienented ae an interval not to exceed two years. As the renuit of testing conducted on June 23, 1994, Isolation Valve ZA-65CV (one of the 82 coagponents) failed the LLRTo resulting in a total leakage value that significantly exceeded the 0.60 La limit.

The 0.60 La limit corresponds to a leakage rate of

\\

5.37 scab (189. 60 scth). The LLRT failure of Yalve ZA-65CV resulted in a total leakage rate that exceeded 17.66 scah (623.57 scth). *

~.

p f Attachment l'.

to NLS950028

. Page 2 of 16 AAm4mmion or Den 4al to Violation 3

The District admits the violation.

4 Ramanna for Violation 1

The immediate cause for not performing local leak rate testing (LLRTs) on 82 components is that they had not been previously identified for inclusion in the CNS 10 CFR 50 Appendix J Program..As discussed in LER 94-011 Revision 1, the root cause for this failure was lack of management commitment to program implementation, in that the organizational focus for problem identification and resolution was primarily, compliance-based.

This resulted in insufficient attention being paid to evolving regulatory issues in this area, for which a compliance-based standard was i

inappropriate.

When the CNS Operating License was issue'd (1974), the specific testable Primary Containment penetrations and Primary Containment Isolation Valves (PCIVs) were listed in the CNS Technical Specifications. Eventually, this list was shifted to the Updated Safety Analysis Report (USAR) through a License Amendment. The original licensing basis was that performance of these specific tests constituted a method for Appendix J compliance that was acceptable to the Atomic Energy Commission (AEC).

The mindset was that since the design of many of the CNS systems pre-dated the issuance of Appendix J

for public

comment, adherence to.

the Technical Specification /USAR list (clong with other specific commitments that might be made) was all that was required, despite later regulatory positions that contradicted this approach. Although these deficiencies were self-identified as a result of broad corrective action' in : response to Inspection Report 93-17, the District duly acknowledges that this condition should have been recognized and corrected long ago.

Corrective Stens Taken and the Results Achieved' In addition to the generic NPG culture improvements that address the root cause as previously noted, other more programmatic corrective actions have been taken As stated in LER 94-011, Revision 1, walkdowns of the Primary Containment penetrations have been performed. This activity contributed to the District's confidence that the scope of the Appendix J. non-compliance has been comprehensively identified.

'See also, Confirmatory Action Letter Response dated July 28, 1994.)

.The following courses of action were then followed:

(1)

As-found testing was performed for penetrations that had not previously been Type A, B,

or C tested and for which this testing was determined to be immediately practicable. Those that were not tested were either modified and then tested, or were designated as candidates for Appendix J exemption.

The total as-found leak rate for the testable penetrations, except X-22 which contained drywell.

pneumatic supply check valve IA-CV-65CV, was 26 SCFH.

With regard to penetration X-22, leakage through IA-CV-65CV was significant, preventing pressurization of the penetration using normal leak rate testing apparatus.

Accordingly, worst-case leakage was examined during safety consequence assessments that were performed.

k Penetration modifications and component maintenance / replacement were performed.

Subsequent testing has verified that the total Primary Containment as-found leak rate is less than the Technical Specification limit.

(2)

Design changes were implemented, which included addition of test connections, installation of welded caps on spare penetrations,

9 s

to NLS950028 Page 3 of 16 complete reder:ign of some containment isolation barriers, and installation of caps on vents, drain lines and test connections.

These design changes have been completed.

(3)

For penetrations and components that have been deemed impractical to test in accordance with the requirements of Appendix J,

NRC exemptions have been obtained.

Corrective Stens That Will Be Taken to Avoid Further Violations Appendix J compliance accountability has been improved by redefining

" program owner" responsibilities to require the primary duty to be ensuring the integrity of the overall program, rather than merely functioning as a testing facilitator.

To assist in this objective, the current licensing basis for Appendix J testing will be formally captured in an Appendix J testing basis document.

This will provide a readily available, controlled source of comprehensive information to the Appendix J program owner which will facilitate the correct disposition of future Appendix J issues as they occur.

Late When Full Comnliance Will Be Achieved CNS is now in full compliance with the testing requirements necessary to demonstrate Primary Containment Integrity.

II.

Violation A.2 Violation A.2 contained in Reference 1 cites the following:

eso cyg page 50, Appendix Bo Criterion n

  • Test Control,
  • states, in o

part, that *(a) test program shall be established to assure tLet all testing required to demonstrate that structures systease and connponeines o

will perform satisfactorily in service is identified and perfaxwed in accordance with written test procedures which incorporate the requirements and acceptance listes contained in applicable design documents."

  • CNB Quality Assurance Program for Operation Policy Directive Revision s

20, Section 2.11, written to AJnplement the requirements of 10 CFR Part 50o Appendix Bo Criterion n requires that each type of test program o

performed will be defined by written procedures and instructions, and it requires that acceptance tests will be developed for structures

systems, o

and congponents to demonstrate their capability to perform satisfactorily following repairs or moditication.

= Contrary to the above the licensee did not assure that all testing was r

identified and perfozmed in accordance with written test procedures which

\\

incorporated the requirements and acceptable limits. Specifically as of May 14o 1994, 68 coagponents passing through 54 primary containment

{

penetrations each required to be local leak rate tested in accordance o

I with the requirements of Technical specification surveL11ance Requirement 4.7.A.2.f.1, " Leak Rate Testiago " had not been identified in a procedure as requiring local leak rate testing, as required by CNB Quality Assurance Program for Operation Policy Directive Revision 20s Bection 2.11.

These s

coagponents had never been local leak rate tested.

l

  • Contrary to the abore the licensee did not assure that all testing was s

identified and perfonaed in accordance with written test procedures which incorporated the requirements and acceptable lialts. As of June 21, 1994, instrument pressure switches PC-PB-12A, Bo Co and DJ PC-PB-101Ao Bo C, and l

Ds PC-PR-119Ao Bo C, and Dr PC-PB-161 and PC-PT-512A and Bo each required to be local leak rate tested in accordance with the requirements of

to NLS950028 Page 4 of 16 i

Technical specification curveillance Requirennent 4.7.A.2.f.1,

  • E,eak Rate Testing,
  • had not been identified in a procedure as requiring local leak rate testing after being isolated from the containment incegrated leak rate testo as required by cars Quality Assurance program for Operations relicy Directive Revision 10, Section 2.11.

These switches had never been local leak rate tested. "

Admission or Denial to Viciation The District admits the violation.

Reasons for Violation The causes for not establishing written LLRT procedures for the components listed in the violation are identical to those discussed in response to-Violation A.1.

A lack of rigor in the Appendix J program (caused by a compliance based management philosophy) resulted in not identifying all of the components for which Type C LLRTs were practicable, and in isolating components which should have been left unisolated for inclusion'in the Type A ILRT boundary. Had all components within the Appendix J scope been previously identified and properly evaluated, they likely would have been included within this testing control program.

Please refer to the-discussion under Violation A.1 for a more complete review of this issue.

Corrective Steos Taken and the Results Achieved The corrective actions discussed for Violation A.1 describe the efforts that have been made to comprehensively identify the additional components that require Appendix J testing. These efforts have been completed, and changes to the CNS Appendix J testing procedures have been made which reflect current licensing basis testing requirements.

Corrective Stens That Will Be Taken to Avoid Further Violations As discussed in the District's response to Violation A.1, a testing basis document is being prepared that will provide a clear connection between the Appendix J requirements, the CNS licensing basis with respect to Appendix J compliance, and the testing procedures that implement the CNS licensing basis.

Date When Full comoliance Will Be Achieved CNS is now in full compliance with the requirement to have written procedures that encompass the full scope of the 10CFR50 Appendix J testing program.

III.

Violation A.3 Violation A.3 contained in Reference 1 cites the following:

"10 Crn Part 50, Appendix 3, Criterion 111, " Design control," states in parts that *[n]easures shall be estab1Labed to assure that...the design basis...fis]

correctly translated into specifications,

drawings, procedures and instructions. These measures shall include provisions to o

assure that appropriate quality standards are specified and included in design documents and that deviations from such standards are controlled. *

" Draft General Design Criterion 53o a measure written to cennply with the requirements of 10 CFR 50, Appendix Bo criterion III, as comunitted to in Appendix F of the tipdated Batety Analysis Report (ETBAR), states that

  • [p]enetrations that require closure for the containment function shall be

~

l 1

~

to NM950028 1

Page 5 of16 j

protected by redundant suiving and associated apparatus.

  • DrafC General Desiga Criterion 1, as connitted to in AppanM w F of the usAna states that "[t] hose systems and components of reactor facilities which are essential to the prevention of accidents which could effect the

{

public health and safety or mitigation of their consequences shall be

}

Adentified and than designed, fabricated, and erected to quality standards

. that reflect the lalportance of the safety function to be pertossed. *

  • 0eneral Electric Design specification No. 22A1153, " Codes and Zadustrial Standard,
  • Revision la states, in Note 3 of the Appendix, that *[pliping, which is an integral part of the primary containment for isolation purposes, shall have at least the same quality and levels of assurance as the primary containment.*
  • Contrary to Criterion ZZZ, "the licensee did not assure that the above design bases were correctly translated into specifications and instructions and did not assure that deviations from quality standards were controlled. Speciticallys a.

As of May 14, 1994, numerous primary containment penetrations had no redundant valving.

These penetrations included, but were not limited to, Penetrations X-21, X-22, X-25, X-298, X-30E/F, X-33E/F, X-209A/B/C/D, and X=218.

b.

As of February 22, 1994, 10 penetrations consisting of annually operated vents, drains, and test connections and requiring closure for the containment fucction, had a single manual isolation valve for containment isolation as opposed to the required redundant valving and associated apparatus.

c.

During an intC inspection conducted June 13, 1994, through August 12,

1994, it was determined that approximately 300 containment penetrations had not been designed, fabricated, or lastalled to the same standards as th'e primary containment because these con lponents had not been correctly classifled as essential. As a result, these penetrations had not been designed, fabricated, or erected to gus11ty standards that reflect the Lagportance of the safety function to be perfo2med (e.g., some welds were not nondestructively tested, some penetrations were not local leak rate tested, and the penetrations were not treated as safety-related by the licensee *s quality assurance program).*

Arfm( s c ion or Denial to violation The District admits the violation.

Reasons for Violatign As noted in this Violation, there were two areas of non-conforming Primary Containment penetration design:

(1) the lack of Primary Containment penetration barrier redundancy for all process lines passing through the Primary Containment, and (2) the improper classification and maintenance of many penetrations as non-essential. These areas are discussed in more detail below.

(1)

Barrier Redundanev-The cited Primary Containment penetration barrier redundancy discrepancies involve manual valve configurations on penetrations designated for process lines. As noted by the NRC in Enclosure 2 of the NOV, these configurations were part of the original plant design. Specifically, the configurations were built i

to be in conformance with the 1967 Draf t AEC General Design Criteria l

l 1

i-

r

[;

I

e

-l to NLS960028 Page 6 a(16 L

(GDC), which did not explicitly require redundancy for process lines i

isolated by manual valves.

In addition, the response to Final Safety Analysis Report (FSAR) Question 5.5 clearly ider tified the District's position with respect to GDC 55 and 56, and Safety Guide 11.

In response to Question 5.5, the District stated that a single.

. manual valve would be employed for instrument lines and lines to.

con'crol systems or devices inside the Primary Containment, including pneumatic lines for valves, dampers, etc.

(Regulatory Guide.1.11 still permits the use of single manual valves.for some applications and the GDC still provides for-the acceptability of containment isolation provisions 'on some other defined basis".)

The CNS SER makes it clear that tho ' AEC's = technical review for' i

initial licensing was performed based.on 10CFR50 Appendix A'

criteria, within which, Criterion 55. provides more prescriptive redundancy requirements.

It is unclear to what degree the AEC reviewed the redundancy issue, but the conclusion was reached in Section 3.1 of the SER that the plant conformed to the ' intent of the Appendix A criteria.

The failure of the NPG to resolve the ambiguity of the licensing basis was a key factor in. the perpetuation of non-redundant Primary Containment penetration barrier configurations, both in the original. design, and after.

various design changes.

In two of the cited examples, it is apparent that there was a lack of rigor in maintaining configuration controls.

Therefore, _ apart from the licensing basis ambiguities, inappropriate configuration management contributed to the existence of non-redundant; or unqualified barriers.

1 (2)

Penetration classification-The penetration misclassifications resulted from an original design error, in that, the requirements of General Electric Specification 22A1153. for piping passing through the Primary Containment were not correctly translated into the piping specifications. The passive function of helping to maintain Primary Containment integrity was not recognized as a safety function for otherwise non-essential piping. -As a result! piping segments were inappropriately procured, fabricated and maintained to the requirements of USAS B31.1, rather than to a level of quality commensurate to that applied for the Primary Containment (as in.USAS B31.7).

The impacts of this discrepancy were that in certain instances:

(a) material traceability was not maintained as applicable for the piping and components; (b) appropriate non-destructive evaluations (NDE) were not performed on all applicable welds and piping; and (c) applicable non-destructive testing (NDT)

'{

was not performed on pressure retaining welds.

Although both of these non-conforming. areas were = elf-identified as a result of design basis reconstitution efforts and broad corrective actions taken in response to Inspection Report 93-17, the District recognizes that these conditions should have been identified and corrected much earlier.

Similar to the previous two violations, the failure to more promptly identify and correct these deficiencies was due in part to a compliance-based focus, such that, undue reliance was placed in the continuing adequacy of the original plant design, based on AEC approval during initial licensing.

.I Corrective Stens Taken and the Results Achieved The District addressed actions regarding barrier redundancy and

(

penetration classifications in a letter dated August 8,

1994.

The following is a summary of corrective actions noted in that letter, as well

to NLS950028 Page 7 of 16 as additional responsive retivities.

(1)

Barrier Redundancv-Walkdowns of Primary Containment penetrations were conducted which verified the as-built barrier configurationa.

As a result of identified discrepancies associated with inadequate Primary Containment penetration barrier redundancy, design changes have been developed and completed which have brought them into conformance.

Also, programmatic enhancements have been made to control vent, drain, and test line barrier configurations as discussed in the District's response to Inspection Report 94-03.

(2)

Penetration classification-A document review was perfor1ned for all Primary Containment piping and instrument penetrations to determine the scope and extent of the misclassifications.

Welds in penetration-attached process lines, for which original construction NDE was insufficient, were identified. Those that were found to be in non-compliance or indeterminate were subjected to additional NDE.

Five welds were found to have rejectable NDE indications and were repaired or replaced as deemed appropriate.

The piping and instrument line segments up to and including the PCIVs have been determined via a Design Change to be of equivalent quality to the Primary Containment, and a reconciliation has been performed between USAS B31.1 and B31.7 for these segments.

These penetrations and components are now treated as Essential IIN, and will be maintained under the District's ASME Section XI Program.

Corrective stenn That Will Be Taken to Avoid Purther Violations No further directly related corrective steps are planned.

However, as stated during the Enforcement Conference, the two ongoing actions described below help to prevent recurrence of simllar types of violations.

(1)

To help identify other licensing basis issues stemming from the original. design, the design basis reconstitution effort is being expedited.

(2)

The ASME Section XI boundaries are being reviewed to identify and resolve other potential pressure boundary classification errors. A Section XI classification boundary basis document is being prepared that identifies the Section XI boundary and defines its bases.

Date When Full comoliance Will Be Achieved CNS is now in full compliance with the requirements for Primary Containment penetration safety classification and PCIV redundancy, as the District understands that the one remaining single-valve PCIV process line is acceptable to the NRC.

PROBLEM AREA B-Ooerability of the 490 Volt and 4160 Volt Busen I.

Violation B.1 Violation B.1 contained in Reference 1 cites the following:

" Technical Specification 3.9.A.1.c,

  • Auxiliary Riectrical Equipments
  • requires, in part, that the reactor shall not be made critical from a Cold Bhutdown Condition unless the 4160 volt critical buses 1F and 10 and the 480 volt critical buses 1F and 10 are energized, and the undervoltage and loss of voltage relays, as well as their auxiliary relays, are operable.
  • Technical Bpecification Burveillance Jtequireament 4.9.A.1.a "Raergency u

1

f to NLS950028 Page 8 of 16 Buses Vadervoltage relays

  • states that *oace every 18 months loss of a

e voltage on emergency buses is slaulated to demonstrate the load sheading from emergency buses and the automatic start of diesel generators. " USAR Rection 2.2.7.2.1.a

  • Btandby A-C Power (Diesel Generators)

Test r

Capability,

  • defines the function of the protective scheme as providing for the clearing the buses of all motor loads excepting supply to the 400 voit erstical unit substation.

" Technical specification 1.Yr " surveillance Frequency,= neates, in parta that

  • performance of a surveillance Requirement within the specifled time interval shall constitute compliance with operability requirements for an 1,CO tlimiting condition for operation) unless otherwise required by the specification.

" Contrary to the above, from January 10, 1974, until May 25a 1994o the reactor had been ande critical without 4160 voit critical buses 17 and 10, and 400 voit critical buses 17 and 10 belag operable in that the undervoltage relays associated with several of the electrical loads supplied by these buses had never been tested to demonstrate their operability or upon testing, failed to perfoza their intended function of shedding their respective electrical loads from these buses. '

Admission or Denial to Violation The District admits the violation.

Reasons for Violation i

The root cause of this violation was the CNS failure to view existing programs and methods with a self-critical and questioning attitude. With respect to fulfilling the surveillance requirements that. demonstrate operability, this resulted in surveillance procedures that did not fully i

test the load shedding function.

This function encompasses the circuit path from the sensing of undervoltage on the 4160 volt and 480 volt busses i

through the opening of the respective circuit breakers on undervoltage.

The requirement to test this function stemmed from a 1979 License

{

Amendment that specifically incorporated this Surveillance Requirement into the CNS Technical Specifications.

The reconciliation performed in 1979 between the load sequence testing procedures and these new requirements was unsatisfactory in that all the required loads were not verified to shed on undervoltage (or loss of voltage), and that the logic system functional testing (LSFT) associated with actuation of the undervoltage relays was not comprehensive.

Numerous opportunities occurred for earlier identification. Most notably during the design basis reconstitution effort, through NRC information to the industry on Westinghouse DB-50 circuit breakers and deficient safety-related LSFTs, and through an Electrical Distribution System Functional Inspection (EDSFI) performed at CNS.

However, given the NPG organizational focus that was previously in place, these opportunities utilized as vehicles for broader programmatic inquiry.

were not Corrective Steos Taken and the Results Achieved several steps were taken to address this violation:

(1)

LSFTs for 4160 volt buses IF and 1G, and 480 volt buses IF and 1G were satisfactorily performed.

(2)

The applicable surveillance procedures were revised to verify that the load shedding function occurs as required.

['.

' Attachment 1

~

to NLS950028 Page 9 of 16 (3)

An electrical calculation was performed which demonstrated that even if load shedding of all of the non-essential 480 volt loads failed to occur, the diesel generators would have performed their intended safety function.

To correct. the long-term reliability ' issues associated with the load

)

shedding capability ' of ' Westinghouse DB-50 circuit breakers, a Design Change was implemented which resulted in replacement of the undervoltage l

trip devices with shunt trip devices within those safety-related circuit breakers that are credited with shedding a non-essential load.

Industry experience has shown this to be an effective configuration.

j corrective Steen That Will Be Talren to Avoid FurPhar Violatinne This violation has~ prompted a broader inquiry into the adequacy of the CNS Surveillance Testing Program. The intent of this effort is to verify that all of the surveillance testing. requirements have been correctly translated into the surveillance procedures.

This effort is more fully discussed in the corrective action for Violation B.2.

Date when Full comn11ance Will Be Achieved CNS is now in full compliance with the requirements of Technical Specifications 3.9.A.1.c and 4.9.A.1.a.

II Violation B.2 violation 8.2 contained in Reference 1 cites the following:

  • 10 CFR Part 50, AppendLJr Bo Criterion XZo " Test Controlo* states La' part, that *[a) - test program shall be established to assure that all testing required to demonstrate that structures, systems and coslponents

{

will perfom satisfactorily in service is identified and perfozxned in accordance with written test procedures which Lacorporate the requirements and acceptable limits contained in applicable design documents. ",

  • Contrary to the above, the licensee did not assure that all testing was identified and performed in accordance with written test procedures which incorporated the requirements and acceptable limits, specifica11ys i

t During an JatC inspection conducted Nay 23, 1994, through August 12, a.

1994, Procedure 6.3.4.3,

  • Requential Zooeding of meergency Diesel Generators " Revision 31, which is performed to satisfy Tech
  • cal o

s specification curvelliance Requirement 4.9.A.1.a

  • L,oss of Vosk. age r

Relays,

  • was detemined to be inadequate because it did not assure

{

that the emergency diesel generators and critical buses would perform satisfactorily la service la that the procedure did not i

l contain requirements to verify that the 490-volt supply breakers for safety-related and nonsafety-related loads would shed from their i

electrical buses within a specifled time, nor did the procedure identify that the contzo1 rod drive gualp motors and statica air cowressors were required to be shed frcan the electrical bus.

b.

During an inspection conducted Nay 23, 1994 through August 12,1994, the JDtC identifled that Procedure 6.3.20.1,

  • rex Service Brater Booster Pun lp Flow Test and Yalve Operability Testo
  • Revision 27, did not provide for the testing of the load shedding feature of the supply breakers associated with the 4160 voit residual heat removal s.rvice -eer boose.t - s."

a 4

k

o-to NLS950028 Page 10 of 16 i

Adm4ssion or Den 4m1 to violation The District admits the violation.

Egamann for Violation The root cause for not establishing written test procedures that adequately reflect the Technical Specification requirements is attributable to the same NPG cultural issues discussed in Violations A.1 a

and B.1.

Furthermore, as discussed in Violation B.1, this generic cause manifested itself throught (1)

Not ensuring the incorporation of all load shedding verifications (including associated LSFTs) into the surveillance procedures when they first became recognized as surveillance requirements.

(2)

Failure to recognize and correct the procedural deficiency in a more timely manner, particularly with respect to the opportunities that occurred that might have prompted such recognition. These included the design basis reconstitution offort, industry operational experience with respect to Westinghouse DB-50 circuit breakers and inadequate LSFTs, and a previous EDSFI.

Corrective Steos Taken and the Results Achieved The surveillance procedures cited in this violation have been revised to reflect appropriate load shed testing. Additionally, as discussed in the District's August 8,

1994, response to an NRC Request for Additional Information, the investigation into the deficiencies of Surveillance Procedure 6.3.20.1 prompted a review of the Logic System Functional Testing performed for several key safety systems.

This review has identified significant testing omissions that are being addressed as documented in LER 94-009.

Corrective Steos That Will Be Taken to Avoid Further Violations CNS is currently verifying that all surveillance requirements contained in the CNS Technical Specifications have been adequately translated into surveillance procedures.

In summary, each Technical Specification surveillance line item is being compared with its analogous implementing procedure to determine exactly how the requirement is met, and whether the procedure is satisfactory. This judgment is being made with reference to various source documents such as elementary diagrams, flow diagrams, the USAR, and Design Criteria Documents, as applicable.

Upon completion of this project, CNS will have system packages that fully document compliance with the Technical Specification surveillance requirements.

Date When Full Comollance Will Be Achleved verification that the key safety system surveillance requirements are adequately described by written procedures will be completed prior to startup. As discussed in the CNS Phase 1 Plan, these key systems include the Automatic Depressurization System, Core Spray System, High Pressure Coolant Injection System, Low Pressure Coolant Injection System, Reactor Protection System, Standby Gas Treatment System, Control Room HVAC System, and Reactor Building HVAC System.

Verification that appropriate written procedures encompass all surveillance requirements will be achieved by July 31, 1995.

?

PROMLEM AREA C-Onerability of the Control Room hsarcency Filter System

~

~

to NLS950028 Page 11 of16 I.

Violation c 1 Violation c.1 contained in Reference 1 cites the following:

  • snochnical Specification 3.12.A.1r
  • Control Room Rmergency Fliter System
  • o states La parts that *...the Control Race Reorgency Fliter system...shall be operable at all times when contain==nt integrity is required.
  • 19e Order Confiz1 ming Licensee Commitments on Post-MZ Related Zssuec o dated 01 sly 10, 1981, confisms WrD*s commitment to complete NUxm0-0737,
  • Clarification of SwZ Action Plan Requirements " Zten ZZZ.D.3.de
  • Control o

Roca Eskitability.

  • Iten ZZZ.D.3.4 involves the review of facility design requirements against the Standard Review Rian.

S'he MRD response to Generic Letter 80-90, dated December 30, 1900, submitted the control vocan habitability evaluation, which stated, in parta "the Cwm control race ventilation system is designed to maintain the control room at about 1/4 in. E 0 (0.031 kPa) positive pressure by supplying air at a high enough r

pressure that even when system losses and the booster exhaust fan pressures are accounted for the control room pressure is still e

posi tive... *

"A Refety Evaluation Report for the Cooper Station from the Accident Evaluation Branch on NUxEG-0737a Zten No.

ZZZ.D 3.de

" Control Rocan Kabitability,* dated February 24, 1982, RCates in parto that

  • ...the design meets the criteria identified in Item ZZZ.D.3.4 of NUKEG-0737 and is acceptable.
  • Contrary to the above from atsne 1989 until April 28, 1994, the Control r

Room Ruergency Filter system was not operable at all times when j

containment integrity was required in that testing failed to demonstrate

\\

that a positive pressure could be maintained in the control room during the periodic perfassaance of the control roca envelope pressurisation test.*

Adm4nelon or Denial to Violation The District admits the violation.

Reasons for Violation The circumstances surrounding the prolonged inoperability of the Control

{

Roon Emergency Filter System (CREFS) were provided.to the NRC in LER 94-006.

As discussed in this LER, the unrecognized inoperability of CREFS was primarily the result of a plant culture that did not approach operability issues with a self-critical and questioning attitude.

Also contributing to the deficiency was an incomplete understanding of the original system design criteria, which led to unsubstantiated reliance on the adequacy of the perceived licensing basis.

Several opportunities occurred to address identified deficiencies in the both the design and performance of the system.

These opportunities were missed because of a design basis that was not well defined, inadequate testing, a compliance-based approach to operability, and a failure to implement adequate corrective action even though the pressurization test results were j

marginal. As a result of these collective deficiencies, the system should not have been considered operable.

Corrective Stens Taken and the Results Achieved As discussed in LER 94-006, corrective actions have been taken that have restored CREFS to operability.

Specifically, door seals in the Control Room envelope were repaired, penetrations were sealed and the adjacent building ventilation control systems inspected and repaired. Testing was

.a.

to NLS950028 Page 12 of 16 performed that confirmed positive pressurization between the range of

+0.04" to +0.05" wg with respect to atmospheric pressure.

As discussed in the District's July 28, 1994, letter to the NRC regarding CREFS commitments, the following additional corrective' actions have been taken prevent recurrence:

(1)

The worst case design basis conditions for Control Room dose has been reassessed, and specific CREFS performance criteria with respect to this scenario has been established and documented.

(2)

An operability limit of 2 +0.03

  • wg with respect to atmosphere for the control Room envelope has been established, together with an administrative limit of a +0.04" wg (in contrast to the previous a

+0.01' wg acceptance criteria.)

Surveillance testing to these limits is being conducted monthly. In the event the administrative limit is not met, the testing frequency would be increased to once every two weeks.

The design basis for the control room envelope continues to be " positive pressure."

(3)

A design change has been iglemented that will eliminate the problem of Control Room and Cable Spreading Room pressure balance.

(4)

To provide additional marg 3n to its established design basis, CREFS has been modified to incretse ventilation flow and pressurization.

Currently, the field work has been completed.

Final design change closure is awaiting accept ance testing and NRC approval of the District's proposed Technical Specification Amendment for CREFS.

corrective Stens That Will Be Taken to Avoid Further Violations Upon NRC approval of the Technical Specification Amendment concerning

CREFS, the operability and administrative limits for Control Room pressurization will be increased.

Date When Full comnliance Will Be Achieved The installation of the CREFS modification has greatly increased the Control Room pressurization capability. However, CREFS flow is now wall in excess of the Technical Specification band of 341 CFM *10%.

The system will be returned to operability and full compliance achieved upon NRC approval the higher band proposed by the District as an amendment to the CREFS Technical Specification.

II.

Violation c.2 Violation C.2 contained in Reference 1 cites the following:

  • 10 CFR Part 50, Appendix Be Criterion XZ,
  • Test Control,* states, in part, that *(a) test program aball be established to assure that all testing required to demonstrate that structures, systems, and coanponents will perfom satisfactorily in service is identified and perfomed in accordance with written test procedures which incorporate the requirements and acceptance limits contained in applicable design documents.

)

  • CNS Quality Assurance Program far Operation Policy Directive Revision r

10, Section 2.11, written to ingpiement the requirements of 10 CFR Part 50, Appendix Bo Criterion XI, requires that each type of test program 1

perfomed will be defined by written procedures and instructions and it o

requires that acceptance tests will be developed for structures

systems, j

a and con \\ponents to demonstrate their capability to perfom satisfactorily i

i

1

\\

i o

to NLS950028 Page 13 of 16 following repairs or anodification.

" Contrary to the above, the licensee did not assure that all testing was identifled and perfomed in accordance with written test procedures' which incorporated the requirements and acceptance limits in applicable design documents.

Specifically, from June 1989 until June 1994, Rurvelliance Procedure 6. 3.17.18e " Control Room Envelope Pressurisation Teste

  • Revision do was not aufficiently detailed in that it did not incorporate acceptance limits to assure that the Control Room RImergency Filter Rystan would perform satisfactorily in service and because the procedure did not prohlhit the inappropriate manipulation of pressures in the adjoining buildings as a precondition for conducClon the test."

Admission or Denial to Violation The District admits the violation.

Reasons for Violation The root cause of this violation was the CNS failure to view existing programs and methods with a self-critical and questioning attitude. With respect to the subject of this violation, a surveillance procedure resulted in inadequate guidance and acceptance criteria for CREFS operability.

In addition to the cultural issues that provided the general climate for this violation to occur, the CNS design and regulatory history of CREFS resulted in an inconsistent understanding of what the exact relationship was between positive Control Room pressurization and CREFS operability.

Pressurization was part of the origin:sl system licensing basis (albeit vaguely defined), but had net been specifically included as a surveillance requirement in the CNS Technical Specifications.

Given the compliance-oriented focus chat was prevalent at the time, this ambiguity resulted in a surveillance procedure that required only nominal pressurization.

Moreover, testing conditions were ill-defined, in that, the required pressures of areas outside the Control Room envelope during the test were not specific.

Corrective Stens Taken and the Results Achieved The District previously addressed several corrective actions in the CAL response dated July 28, 1994 Also as discussed in the corrective actions for Violation C.1, the worst case design basis conditions for Control Room dose has been reassessed, and specific CREFS performance criteria with respect to this scenario has been established and documented.

Surveillance Procedure 6.3.17.18 has been revised to define acceptance criteria reflecting the design basis performance requirements, and to specify the testing conditions required for areas bounding the Control Room envelope.

An amendment to the CNS Technical Specifications has been submitted to the NRC to include demonstration of positive Control Room pressurization to the surveillance requirements of CREFS.

Corrective stens That Will Be Taken to Avoid Further Violations This violation represents a deficiency in the Surveillance Testing Program. As discussed in Violation B.2, a comprehensive effort has been undertaken to verify that the surveillance requirements of the CNS Technical Specifications (as well as other license requirements that impact operability) have been adequately translated into surveillance

e.

i to NLS950028 -

Page 14 of 16 procedures.

Date When Full comnliance Will Ee Achieved As discussed in Violation B.2, verification that the key safety system surveillance requirements are adequately described by written procedures will be completed prior to startup. Verification of full compliance with having written procedures that encompass all surveillance requirements will be completed by July 31, 1995.

Violations Not Assessed A civil Penaltv Section II.A contained in Keference 1 states the following:

  • 10 CFR Part 50, Appendix B,

criterion V,

" Instructions, Procedures and l

Drawings

  • states, in parts that * [s)ctivities affecting qus11ty shall be o

prescribed by documented instructions, procedures, or drawings, of a type appropriate to the circumstances and shall be accoanplished in accordance with these instructions, procedures, or drawings.

  • sngineering Procedure 3.8,
  • Drawing Control Procedure
  • Revision 7, written, in r

parta to Lagplament 10 CFR Part 50 Appendix Bo Criterion Vo requires that safety-i related drawings be included on the safety-related drawing list."

A.

Violation 1

  • Contrary to the above, during an NRC inspection conducted June 13, 1994, through August 12, 1994, it was detersnined that safety-related flow Diagram No. 2028o " Reactor Building and Drywell Equipament Drain System
  • o Revision N27a was not included on the safety-related drawing list. As a result of this determination, the licensee subsequently identifled 13 other drawings containing safety-related coagponents that were not included on the safety-related drawing list. "

Artm4 s sion or Denial to Violation The District admits that deficiencies existed in the safety-related list and that 14 drawings were identified that did not have appropriate safety-related components identified.

Reasons For The V3 elation The ' safety-related list" was initially developed in 1985, according to the premise that it would include the drawings of those systems that had recognized safety and plant availability functions. The purpose of this was to ensure that quality-affecting activities would only be performed with reference to final Status 1 drawings (As-built, certified as constructed, Certified, or Certified final by vendor and signed), as oppcsed to Archival (Status 2) or Construction (Status 3) drawings. The list was established as an interim measure until more programmatic changes were completed.

Accordingly, Procedure 3.8 was revised to define the three Status Categories, and to proceduralize the requirement that the user ensure that safety-related activities involve only Status 1 drawings, s

After this was accomplished, the safety-related list had no quality function with regard to this deficiency.

-1 In 1986, a drawing verification project was initiated to validate the as-built status of selected Control Room drawings. The scope of this effort was initially confined to drawings contained on the previously identified safety-related list. Between 1986 and 1988, the list was revised numerous times as additional safety-related components were identified, which

y O

9 to NLS950028 Page 15 of 16 likewise affected the drawing verification project scope.

In 1989, a step was added to Procedure 3.8 to provide a formal mechanism for making additions or deletions to the list, which would in turn signal the Configuration Management Group of additional drawings that should be screened for as-built verification.

During the above processes, information was not completely transmitted between lists and drawings.

Corrective Actions Taken and the Results Achieved As discussed above, the Safety-Related List currently serves only as a scoping document for as-built drawing verification efforts.

This is a function better served by adequate project scoping instructions than by establishment in the CNS procedures. Accordingly, reference to this set of drawings has been removed from the Procedure 3.8.

The additional drawings that were identified as containing safety-related components are being separately assessed for inclusion in the as-built verification project.

Corrective Steos That Will Be Taken to Avoid Further violations There are no further corrective steps being planned to address this issue.

Date When Full Comnliance Will Be Achieved CNS is in full compliance with the requirement that activities affecting quality be appropriately prescribed by procedures, with respect to the activities described by CNS Procedure 3.8.

B.

Violation 2

  • Contrary to the above during an JatC inspection conducted Nay 23, 1994, r

through August 12, 1994, Maintenance Procedure 7*.3 2.1o *DB-25 and DB-50 Circuit Breakers - Betting, Testing, and Maintenance (With Astptectors), "

Jtevision 3, was determined to be inappropriate to the circumstances in that the procedure did not contain a requirement to remove tie-wraps from the subject breakers following preventive maintenance nor did the r

procedure provide for ccunprehensive post-maintenance testing of all circuit breaker functions following the connpletion of preventive maintenance."

Admission or Denial to Violation The District admits the violation.

Reasons for Violation This violation resulted from the discovery on May 16, 1994 that a tie-wrap was installed on the undervoltage trip device of the feeder breaker to MCC-N.

Subsequent investigations revealed that the tie-wrap was installed as allowed during the performance of Maintenance Procedure 7.3.2.1.

This procedure was found to have no explicit requirements for removing the tie-or for post-maintenance testing that would identify such discrepant

wrap, conditions.

As stated in the District's July 28, 1994 response to Confirmatory Action Letter 4-94-06b, the root cause of the event was the f ailure of management to ensure that requirements for configuration control were adequately implemented into the maintenance procedure.

Management's expectations

-a

.o to NLS950028 Page 16 of 16 were not clearly communicated and effected through the procedure review and approval process. As a result, a requirement to retrove the tie-wrap was not included at the conclusion of the procedural section.

A contributing factor to the procedural omission was the inappropriate assumption that such restoration steps were within the " skill of the craf t," and as such, did not require specific articulation. In this case, it is clear that restoration steps should have been provided.

corrective Stens Taken and the Results Achieved As previously discussed in the CAL response dated July 28, 1994, the following steps have been taken to correct the immediate condition:

(1)

Plant walkdowns have been performed that have verified that no other tie-wraps or other blocking devices were installed on any of the 480 volt breakers on 480 volt busses lA, 1B, lE, 1F, and 1G.

)

A review was conducted of station procedures covering electrical and mechanical maintenance to determine if similar ambiguities existed with regard to blocking device removal.

This resulted in 18 procedure changes.

A similar review was performed for procedures controlled by the Operations, I&C, Engineering, and Radiological Departments, which likewise resulted in a number of procedure changes.

(3)

A revision has been made to Maintenance Work Practice (MWP) 5.0.4 to add guidance that any impairments, changes or blocking devices installed during the performance of maintenance activities have been removed prior to completion of the procedure.

(4)

Maintenance supervision has communicated to their departments the need for procedural compliance and immediate correction of procedural problems and/or incomplete understanding of procedure requirements.

porrective Steos That Will Be Taken to Avoid Further Violations The District is committed to broad-based action to achieve excellence in Configuration Management, as discussed in the NPG Per formance Improvement Plans.

These actions, in addition to the corrective actions described above will prevent further similar violations.

Date When Full Comnliance Will Be Achieved CNS is now in full compliance with the requirement that activities affecting quality be appropriately prescribed by procedures, with respect to installation and removal of temporary blocking devices.

.. ', The licensee currently plans to commence startup and power ascension on February 8, 1995. An interim restart organization has been formed, including i

a dedicated Restart Manager, 24-hour site management coverage, an augmented operating crew on shift and a continuously-manned, dedicated work control center. The power ascension plan calls for hold points at 50% and 90% power, 1

and includes a contingency shutdown from 30% power for corrective maintenace, if necessary. The licensee plans to reach 100% power in approximately 3

{

weeks. Region IV has initiated 24-hour coverage at the site and will focus on surveillance testing and maintenance, the areas of weakness that led to the extended shutdown. This augmented coverage will continue through March 5, 1995, as currently planned.

Docket No. 50-298 cc:

All NRR PDs A. Chaffee, D0PS/0ECB A. Gody, DISP /PIPB D. Norkin, DOTS /TSIB l

l DISTRIBUTION:

PDIV-1 r/f JHall PNoonan Document Name: C00 DAILY.HL OFC LA/PD4r h u PM/PD4-1 D/PD4-_1 NAME PNoon d

JHall/vwk WBec$n$

DATE 9/3/95 2/F/95 Nd/95 COPY YES/NO kS)0 YES/NO 0FFICIAL RECORD COPY