(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| 09-30-2014 | On August 5, 2014, the 'A' emergency filtration train ( EFT) was out of service for charcoal filter replacement work; during that time 13' EFT was placed in service to supply fresh filtered air to the Control Room. After the 13' EFT had run for 12 minutes, a low flow alarm occurred and the '13' EFT fan tripped. This resulted in both trains of emergency filtration being inoperable. Technical Specification Limiting Condition for Operation (LCO) 3.7.4 was not met and as a result, LCO 3.0.3 was entered at 16:01 hours which required the plant to be in Mode 4 within 37 hours4.282407e-4 days <br />0.0103 hours <br />6.117725e-5 weeks <br />1.40785e-5 months <br />.
The '13' EFT fan tripped because the damper actuator failed due to poor quality of vendor refurbishment. The 'B' EFT trip caused the plant to enter LCO 3.0.3 due to the legacy operating procedure that permitted Operators to start the 'B' EFT while 'A' EFT was inoperable for maintenance.
The failed actuator was subsequently replaced and post maintenance testing was satisfactorily completed.
The EFT procedures will also be revised to restrict operation of the standby train while in protected status. |
|---|
Reported lessons learned are incorporated into the licensing process and fed back to industry.
Send comments regarding burden estimate to the FOIA, Privacy and Information Collections Branch (T-5 F53), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by internet e-mail to Infocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503. If a means used to impose an information collection does not display a currently valid OMB control number, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collection.
EVENT DESCRIPTION
At the time of event, the plant was operating in Mode 1 at approximately 88% rated thermal power.
On August 5, 2014, the 'A' train of emergency filtration (EFT) was out of service for charcoal filter [FLT] replacement work. The '13' EFT was placed in service at 14:34 hours to supply fresh filtered air to the Control Room.
At 14:46 hours the Control Room received a low flow alarm for '13' EFT which initiated an automatic 'B' EFT fan [FAN] trip and damper [DMP] to close which isolated the filter train. This isolation resulted in both trains of EFT being inoperable. As a result, Technical Specification 3.7.4 was not met and Limiting Condition for Operation (LCO) 3.0.3 was entered at 16:01 hours.
LCO 3.0.3 was exited following successful completion of post maintenance testing on the 'A' train of EFT at 17:07 hours. There was no addition of negative reactivity to the reactor during the time the plant was in LCO 3.0.3.
EVENT ANALYSIS
This condition is being submitted in accordance with 10 CFR 50.73(a)(2)(v)(D) "Event or Condition that Could Have Prevented Fulfillment of a Safety Function." With both emergency filter trains inoperable, Control Room habitability would not have been assured should a radiological release have occurred. The emergency filtration safety trains mitigate the consequences of an accident by assuring Control Room habitability.
As a result of both trains of EFT being inoperable concurrently, this event is considered a safety system functional failure.
SAFETY SIGNIFICANCE
The EFT system has two functions. The first function is to allow manual isolation of outside air from the Control Room and first and second floors of the EFT Building which places the system in full recirculation.
The second function is to automatically isolate outside air and provide filtered/pressurizing air to the Control Room and first and second floors of the EFT Building. With both filter trains inoperable, Control Room habitability may not have been maintained during an unfiltered radioactive release. During this events' time frame, Control Room breathing air supply system was available to provide three hours of air for up to eight personnel, but was not required to be used.
CAUSE
The 'B' EFT fan tripped because the damper actuator failed due to poor quality of vendor refurbishment.
The damper actuator was in service (operating train) for approximately 250 hours0.00289 days <br />0.0694 hours <br />4.133598e-4 weeks <br />9.5125e-5 months <br /> prior to failure. Normal life expectancy for rebuilt actuators is greater than five years.
The 'B' EFT trip caused the plant to enter LCO 3.0.3 due to the legacy operating procedure that permitted Operators to start the 'B' EFT while 'A' EFT was inoperable for maintenance.
CORRECTIVE ACTION
The failed actuator was subsequently replaced and post maintenance testing was satisfactorily completed.
The damper actuator has been returned to the vendor for failure analysis. Additional corrective actions may be required based on the results of those analyses.
The EFT procedures will also be revised to restrict operation of the standby train while in protected status.
PREVIOUS SIMILAR EVENTS
There were no previously similar Licensee Event Reports in the past three years.
|
|---|
|
|
| | | Reporting criterion |
|---|
| 05000263/LER-2014-001, Regarding Primary System Leakage Found in Recirculation Pump Upper Seal Heat Exchanger | Regarding Primary System Leakage Found in Recirculation Pump Upper Seal Heat Exchanger | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | | 05000263/LER-2014-002, Regarding Torus to Drywell Vacuum Breaker Did Not Indicate Closed During Testing | Regarding Torus to Drywell Vacuum Breaker Did Not Indicate Closed During Testing | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | | 05000263/LER-2014-003, Regarding Torus to Drywell Vacuum Breaker Dual Indication During Testing | Regarding Torus to Drywell Vacuum Breaker Dual Indication During Testing | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | | 05000263/LER-2014-004, Time to Energize Loads Greater than Surveillance Requirement | Time to Energize Loads Greater than Surveillance Requirement | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2014-005, Regarding Appendix R Fire Door Failed to Latch | Regarding Appendix R Fire Door Failed to Latch | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2014-006, Regarding Secondary Containment Doors Opened Simultaneously | Regarding Secondary Containment Doors Opened Simultaneously | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | | 05000263/LER-2014-007, Regarding Non-compliance with Technical Specification 3.4.9 - Reactor Coolant System Pressure and Temperature Limits | Regarding Non-compliance with Technical Specification 3.4.9 - Reactor Coolant System Pressure and Temperature Limits | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) | | 05000263/LER-2014-008, Regarding Opening Identified in Fire Barrier | Regarding Opening Identified in Fire Barrier | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | | 05000263/LER-2014-009 | Both Emergency Filtration Trains Inoperable | 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident | | 05000263/LER-2014-010-02, Regarding Physical Security Plan Inaccuracy Revealed Past Security Vulnerability | Regarding Physical Security Plan Inaccuracy Revealed Past Security Vulnerability | | | 05000263/LER-2014-011, Regarding Two Emergency Diesels Inoperable Due to Human Error | Regarding Two Emergency Diesels Inoperable Due to Human Error | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(ix)(A), Prevented Safety Function in Multiple System 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(viii)(B) |
|