ML20205G407

Security Event Rept:On 990304,failure to Properly Compensate for Loss of Safeguards Equipment That Could Have Resulted in Undetected Intrusion Into Protected or Vital Area,Was Discovered.Caused by Msk 325 Failure.Replaced Msk 325

ML20205G407
Person / Time
Site:	Callaway
Issue date:	03/25/1999
From:	Affolter R UNION ELECTRIC CO.
To:	NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
References
ULNRC-3994, NUDOCS 9904070239
Download: ML20205G407 (7)

Text

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

... _ i-Union Electric PO Box 620 Callaway Plant Fulton, MO 65251 March 25,1999 U. S. Nuclear Regulatory Commission Attn: Document Control Desk Mail Stop Pl-137 Washington, DC 20555-0001 ULNRC-3994 Gentlemen:

UE D CKET NUMBER 50-483 CALLAWAY PLANT UNIT 1 UNION ELECTRIC CO.

FACILITY OPERATING LICENSE NPF-30 SECURITY EVENT REPORT UNCOMPENSATED SECURITY MEASURE The enclosed security event report is submitted in accordance with 10CFR73.71(b) to report safeguard event described in 10 CFR 73, Appendix G.

ll Ron r

Manager, Callaway Plant RDA/ssm Enclosure JI

[

P A

S

k ULNRC-3994 March 25,1999

- Page 2 cc: Mr. Ellis W. Merschoff Regional Administrator U.S. Nuclear Regulatory Commission Region IV 611 Ryan Plaza Drive, Suite 400 Arlington, TX 76011-8064 Senior Resident Inspector Callaway Resident Office U.S. Nuclear Regulatory Commission 8201 NRC Road Steedman,MO 65077 Mr. Melvin K. Gray (2 copies)

Licensing Project Manager, Callaway Plant Office of Nuclear Reactor Regulation U. S. Nuclear Regulatory Commission 1

Mail Stop 13E16 Washington, DC 20555-2738 i

Manager, Electric Department i

Missouri Public Service Commission PO Box 360 Jefferson City, MO 65102 Records Center Institute of Nuclear Power Operations 700 Galleria Parkway Atlanta, GA 30339.

i l

L s..

~

SECURITY EVENT REPORT UNCOMPENSATED SECURITY MEASURES DESCRIPTION OF EVENT On March 4,1999 a failure to properly compensate for a loss of safeguards equipment that could have resulted in an undetected intrusion into the protected or vital area was discovered by the Security Department.

At the time of the event a modification to the plant security computer was in progress which resulted in a portion of the perimeter intrusion detection equipment being inoperable. This modification was preplanned and compensatory measures were in place. Subsequently, unplanned equipment failures occurred, at which time full compensatory measures were properly initiated. Partial equipment restoration allowed compensatory measures for that equipment to be discontinued. Due to miscommunication, compensatory measures for some inoperable equipment were mistakenly terminated for a period of approximately 44 minutes.

Full compensatory measures were re-instituted following the event.

l CHRONOLOGICAL ORDER OF EVENTS l

Early 1999 The need for compensatory measures in support of MP 97-1021, new security computer installation, was identified in the planning phase March 1.1999

1. On March 1,1999 MSK326 cabinet removal began allowing through installation of the multiplexer for the new system.

March 3.1999

2. The new multiplexer was installed March 2,1999. Upon installation of the new unit all affected components were tested to ensure it would alarm on every system.

3. By 0900 hrs on March 3,1999, testing of the new multiplexer was complete. CAS and SAS were receiving alarms on the new system, however compensatory measures were still in place pending completion of acceptance testing.

March 3.1999 The second multiplexer, MSK327, was taken offline. The 1132 hrs multiplexer was removed from the cabinet to allow installation of the new multiplexer. Two of the microwaves driven by MSK327 were affected by this event.

2105 hrs MSK325 failed on line. This failure caused the Security computer to exceed its capacity limit of alarms. When the computer exceeds its alarm capacity, it begins resetting alarms. This failure was unrelated to the modification in progress.

l l

Page1of5 l

b

r

)

SECURITY EVENT REPORT UNCOMPENSATED SECURITY MEASURES March 3.1999 Full compensatory measures to cover this failure were in place 2115 hrs within 10 minutes of the event. This action was logged.

March 4.1999 It was determined the MUX 325 problem could nas be isolated and 0000 - 0100 hrs -

the multiplexer (MUX) would be replaced.

0930 hrs The Security Shift Supervisor (SSS) and CAS Supervisor decided to secure from full compensatory (comp) measures and comp only the equipment affected by three multiplexers that were offline (MSK326, MSK327, MSK325) after required testing was completed.

- 0900 -1130 hrs Before securing full compensatory measures, a test is performed on all doors and microwave zones operable on the old system. This test was completed satisfactorily. The degraded areas are not included in this test and were to remain under full compensatory measures.

l 1100- 1154 hrs

1. During conversations between the SSS and CAS Supervisor,it I

was reiterated that Security would continue to comp the equipment affected by MSK325, MSK326 and MSK327.

2. Dedicated observers in Security Response Centers (SRC) SRC 2 and SRC 3 monitored the microwave zones. Each SRC has video camera monitors.

3. The CAS Supervisor contacted SRC 2 and SRC 3 to check which zones the dedicated observer's were monitoring. They relayed the zones verbally to the CAS Supervisor.

1154 hrs

1. The CAS Supervisor announced via radio to all Security force members that full compensatory measures were being secured

2. The officer in SRC 2 attempted to confirm message receipt by stating her badge number via radio. This message was not received or acknowledged by the Assistant CAS Supervisor.

3. The officer stationed in SRC 2 perceived the message to include SRC 2 zones and terminated dedicated observations.

4. The security officer in SRC 2 logged that compensatory measures were' terminated.

1200 hrs Security Officer in SRC 2 relieflogged in. The officers in SRC 3 were relieved at approximately the same time.

Page 2 of 5 g

E SECURITY EVENT REPORT UNCOMPENSATED SECURITY MEASURES March 4.1999

1. SRC 3 called the CAS supervisor to verify that his zones still 1238 hrs -

required dedicated observation. This phone call prompted the CAS supervisor to verify the same information with the officer stationed at SRC 2.

2. The CAS Supervisor phoned the officer at SRC 2 to verify that he was still dedicated to the zones. At this time, the CAS Sup.nsor was advised by the officer stationed in SRC 2 that dedicated observation post had been secured at 1154 hrs.

3. Dedicated Observer (DO) compensatory measures were immediately reinstated in SRC 2.

1325 hrs The CAS Supervisor contacted the Security Shift Supervisor (SSS) and informed him of the ever.t. The CAS Supervisor stated that he was aware of the vulnerability but was not aware that this was a one-hour reportable event. In the normal course of business, a Security Officer has until the end of their shift to write up and report an evert.

1325 - 1340 hrs Upon notification, the SSS:

Phoned SRC 2 and confirmed that dedicated observations were in place.

Reauested the log from SRC 2 be brought to MAF for his

eview.

Reviewed a copy of the reporting matrix to revie a act

~ bility a

obligations.

Further discussed details of event with CAS Supervisor.

1340 hrs

1. The SSS contacted the Security Training Supervisor.

2. The Security Training Supavisor assessed the situation with the SSS prior to reporting the event to the Security Operations Supervisor.

1350 hrs The Security Operations Supervisor reported the event to the Control Room at 1350 hrs.

G55 bn

1. A search of the protected area perimeter for evidence of tampering, intrusion or discovery of contraband was initiat '.

2. A badge check of all personnel inside the protected areas was initiated.

3. A search of all buildings and areas inside the protected area was initiated.

Page 3 of 5 L_

SECURITY EVENT REPORT UNCOMPENSATED SECURITY MEASURES March 4.1999 The SSS notified the Manager, Operations Support and advised him 1400 hrs of the incident and the remedial actions taken (the Acting Superintendent, Security was out of the office at the time).

1423 hrs The event was reported to the NRC by a phone call on the ENS line.

1450 As a further precautionary Measure, full compensatory actions were re-instituted at the direction of the Manager, Operatior., Support.-

1500 An Event Review Team meeting on the incident was convened.

Attendees at the meeting included: the Assistant. Plant Manager; Manager, Operations Support; and representatives from the Security; Engineering; Training; Quality Assurance and Operations Departments.

1555 The peJ ueter inspection was completed with no discrepancies found.

1643

1. The badge check was completed with no discrepancies found.

2. The building / area search was completed with no discrepancies found.

March 12.1999 R.eturned to partial compensatory measures after briefing the Manager, Operations Support regarding the implementation of corrective actions for this evcut.

BASIS FOR REPORTABILITY

.This event is reportable per 10CFR73.71(b) as a safeguard event described in 10CFR73 -

. Appendix G.

CONDITIONS AT TIME OF EVENT Mode 1, Power Operations - 100% power ROOT CAUSE

1. MSK 325 Failure

2. Incomplete communication resulted in the unintended termint. tion of required compensatory measures in SRC 2.

lL l

Page 4 of 5 LI

~

SECURITY EVENT REPORT UNCOMPENSATED SECURITY MEASURES CORRECTIVE ACTIONS.

MSK 375 Failure Cause of ME 325 failure was undeterminable.

e Replaced MSK 325.

New MSK 325 tested, accepted ar.d placed in servic<

Incomplete Communicationsffermination of Compensatory Measure A search of the protected area perimeter for evidence of tampering, intrusion, or

=

l possible contraband was conducted with no_ discrepancies found.

A badge check of all personnel inside the protected area was conducted with no discrepancies found.

i A search of all buildings and areas inside the protected area was conducted with no e

discrepancies found.

Implemented checklists for planned / unplanned starting and ending for full system and multiplexer compensatory measures. These checklists also cover transitioning from i

full to partial compensatory measures. Preplanned announcements are included on the checklists.

Revised the Dedicated Observer Log form to require the Security Shift Supervisor e

(SSS) or Shift Security Assistant Supervisor (SSAS) to respond to the dedicated -

observers beation, to review the log, and sign off on any additions or deletions to the bg.

Conducted a training session with each Security crew. This training included a review of the reported incident and a review of"three way communications" principles.

SAFETY SIGNIFICANCE The duration the failed compensatory measure was of a relatively short time (44 minutes).

The plant's protected area perimeter remained in tact during this period. The failure of the compensatory measure was unplanned, unpredictable, and as a result, the uncompensated perimeter zones were not readily apparent to any person c utside the protected area. The monitors in the area of the dedicated observer were still operating and, although the observer l

was not giving the monitor screens full attention, unusual activity in the zones in question would likely have been observed from that station.

u Therefore, based on these facts and subsequent badge checks, and perimeter, building and area searches this occurrence had no impact on plant safety and did not pose a threat to public health and safety.

PREVIOUS OCCURRENCES A review of the SOS database revealed no historical events of this nature.

Page5of5 6