Loading...
HomeMy WebLinkAbout851180.tiff SSINS No. : 6835 IN 85-85 UNITED STATES NUCLEAR REGULATORY COMMISSION OFFICE OF INSPECTION AND ENFORCEMENT WASHINGTON, D.C. 20555 October 31, 1985 IE INFORMATION NOTICE $5-85: SYSTEMS INTERACTION EVENT RESULTING IN REACTOR SYSTEM SAFETY RELIEF VALVE OPENING FOLLOWING A FIRE-PROTECTION DELUGE SYSTEM MALFUNCTION Addressees: All nuclear power reactor facilities holding an operating license (OL) or a construction permit (CP). Purpose: This notice is provided to alert licensees of a serious systems interaction event involving the fire-protection deluge system located in the control room ventilation charcoal filter housing. Following inadvertent actuation of this system, an analog transient trip system (ATTS) panel was sprayed with water causing malfunctions in certain safety system components. It is expected that recipients will review this notice for applicability to their facilities and consider actions, if appropriate, to preclude a similar problem occurring at their facilities. However, suggestions contained in this notice do not constitute requirements; therefore, no specific action or written response is required. Description of Circumstances: On May 15, 1985, at Georgia Power Company's Hatch Unit 1, personnel manually scrammed the reactor from 75% power because of a stuck open low-low-set safety relief valve (LLS-SRV). Shorting of one of the two redundant power supplies and/or possibly intermittent shorting of logic system contacts in the ATTS panel is believed to have caused the stuck open LLS-SRV. The panel is one of two redundant panels located in the control room. The cause of the electrical shorts in the affected panel was water intrusion into the panel . The event began about 8:35 p.m. when an instrument water supply vent valve was damaged, apparently by dragging of a crane hook along the line. The instru- ment water supply line eventually depressurized causing a portion of the fire- protection deluge system to actuate. The water supply line is located above the control building and the deluge system is located in the control room charcoal filter housing. Following actuation of the deluge system, approximately 15 to 25 gal of water backed up into the ventilation header before the system could be secured. The 8510290039 851180 cz,4 rouil3PBS IN 85-85 October 31, 1985 Page 2 of 3 backup was caused by plugged drains 'in the charcoal filter housing. Water eventually leaked through a hole in the ventilation piping that was located above the ATTS panel in the control room. When the water sprayed onto the panel , one of two redundant panel power supplies apparently shorted because of water intrusion into the panel . As a result, a LLS-SRV valve began to cycle open and closed. The SRV cycled three times and then opened and remained open. The operator manually scrammed the reactor from 75% power. A false turbine high exhaust pressure trip signal also was generated', temporarily disabling the high pressure core injection (HPCI) system: The reactor core isolation cooling (RCIC) system was inoperable at the time, so neither HPCI nor RCIC was imme- diately available for use. Fortunately, neither system was needed during the event. This is because the water level was restored and maintained by the . reactor feedwater system until the MSIVs were shut. Subsequent to MSIV closure, water level was maintained by the control rod drive (CRD) system with thee, excess water being dumped to the condenser via the reactor water cleanup ,system. The LLS-SRV closed without operator action at 9:52 pm. Discussion: The event is of considerable concern because of the potential for multiple safety system failures through unanalyzed systems interactions. In this event, the water from the fire-suppression deluge system in the control room caused opening of a safety relief valve and loss of primary system inventory. The event could have been seriously aggravated by the spurious HPCI turbine high exhaust pressure .trip that was received, also apparently as a result of the water intrusion. Because the RCIC system was inoperable at the time of the event, no safety-related high pressure injection system would have been imme- diately available to restore water level should that have been necessary. ' The HPCI turbine trip signal was reset shortly after it occurred, however, and the system was returned to operability. Perhaps more serious is the potential effect the water could have had on numerous other safety systems. The ATTS panels have permissive and arming . logic and trip logic for various safety systems, 'as well as water level inputs to the HPCI, RCIC, core spray (CS) , automatic depressurization system (ADS), residual heat removal (RHR) system, and diesel activation logic. It is hard to predict the anomalous behavior that could occur if ,both power supplies had been lost, or if other portions of the logic had been shorted; but -quite possibly, several safety systems could have malfunctioned, seriously handicapping' the operators during their efforts to stabilize the unit. Prior to this event, no procedures were in place at Hatch Unit 1 for adequately cleaning the ventilation plenums or drains , in ,the charcoal filter units. Had . these procedures been prepared and implemented, the drains would have functioned as designed with no serious adverse effects. In response tp this event, the licensee cleaned and inspected drains in the remaining filter units andAs preparing cleanout and inspection procedures to be added to the maintenance schedules. IN 85-85 October 31, 1985 Page 3 of 3 Another example of a design feature which could cause potential adverse system interactions was recently found at Unit 1 of the South Texas Project. A non- seismic, non-category I potable water line was found to pass through the control room envelope via a relay room next to the control room. This could subject the solid-state protection system cabinets and the Westinghouse 7300 process control system located nearby to water damage following a seismic event. Although this unit is under construction, it does point out that these problems can occur. Also, IE Information Notice 83-41, "Actuation of Fire Suppression System Causing Inoperability of Safety Related Equipment," was issued on June 22, 1983. That notice identified a number of instances in which automatic actuation of fire suppression systems degraded or jeopardized the operability of safety- related equipment. No specific action or written response is required by this information notice. If you have any questions regarding this matter, please contact the Regional Administrator of the appropriate NRC regional office or the technical contact listed below. lwarrdan�or Divis n of Emergency Preparedness and Engineering Response Office of Inspection and Enforcement Technical Contact: David R. Powell , IE (301) 492-8373 Attachment: List of Recently Issued IE Information Notices Attachment 1 IN 85-85 October 31, 1985 LIST OF RECENTLY ISSUED IE INFORMATION NOTICES Information Date of Notice No. Subject Issue Issued to 85-84 Inadequate Inservice Testing 10/30/85 All power reactor Of Main Steam Isolation Valves facilities holding an OL or CP 85-83 Potential Failures Of General 10/30/85 All power reactor Electric PK-2 Test Blocks facilities holding an OL or CP 85-82 Diesel Generator Differen- 10/18/85 All power reactor tial Protection Relay Not facilities holding Seismically Qualified an OL or CP 85-81 Problems Resulting In 10/17/85 All power reactor Erroneously High Reading facilities holding With Panasonic 800 Series an OL or CP and Thermoluminescent Dosimeters certain material and fuel cycle licensees 85-80 Timely Declaration Of An 10/15/85 All power reactor Emergency Class Implenienta- facilities holding tion Of An Emergency Plan, an OL or CP And Emergency Notifications 85-17 Possible Sticking Of ASCO 10/1/85 All power reactor Sup. 1 Solenoid Valves facilities holding an OL or CP 85-79 Inadequate Communications 9/30/85 All power reactor Between Maintenance, facilities holding Operations, And Security an OL or CP; research Personnel and nonpower reactor facilities; fuel fabrication and processing facilities 85-78 Event Notification 9/23/85 All power reactor facilities holding an OL or CP OL = Operating License CP = Construction Permit SSINS No. : 6835 IN 85-84 UNITED STATES NUCLEAR REGULATORY COMMISSION OFFICE OF INSPECTION AND ENFORCEMENT WASHINGTON, D.C. 20555 October 30, 1985 IE INFORMATION NOTICE NO. 85-84: INADEQUATE TESTING OF MAIN STEAM ISOLATION VALVES Addressees: All nuclear power reactor facilities holding an operating license (OL) or a construction permit (CP). Purpose: This notice is being provided to alert recipients of a potentially significant problem concerning the possible failure of main steam isolation valves (MSIVs) to close under low steam flow conditions and the testing of these valves with non-safety-related motive power in place. It is expected that recipients will review the information for applicability to their facilities and consider actions, if appropriate, to preclude a similar problem occurring at their facilities. However, suggestions contained in this information notice do not constitute NRC requirements; therefore, no specific action or written response is required. Past Related Correspondence Information Notice 85-21, "Main Steam Isolation Valve Closure Logic" , March 18, 1985. Description of Circumstances: During inspections at Robinson Unit 2 in November 1984 and at Turkey Point Units 3 and 4 in February 1985, NRC inspectors noted that MSIV surveillance testing procedures did not call for securing the instrument air supply to the MSIV control system during a test. Recognizing this as contrary to the objec- tive of operational verification of the MSIVs, the NRC cited these plants for violating 10 CFR 50.55a(g). After reviewing the matter to determine the corrective action, Florida Power & Light Co. , the licensee for Turkey Point Units 3 and 4, reported to the NRC on July 23, 1985, that a deficiency existed concerning the ability of MSIVsto close under low steam flow conditions. The safety-related air supply, stored in accumulators, was not adequate to close the valves in the event of loss of the non-safety-related instrument air system. This had not been discovered during routine testing because that testing had been performed improperly using the non-safety-related instrument air to achieve closure. 8510250546 1�d m-nali )%6 IN 85-84 October 30, 1985 Page 2 of 3 Operating air for the MSIVs is stored in accumulators mounted on the valve assembly; the non-safety-related plant instrument air system provides addition- al supply. During normal operation the MSIVs at Turkey Point are held open against steam flow by air pressure acting on the bottom of the actuator operat- ing piston. When a closing signal is received, air is directed to the top of the piston while air is vented from the bottom of the piston. Closure of each MSIV is assisted by a spring that moves the piston part way, by steam flow in the steam line, and by gravity. Assuming a loss of the instrument air system, the air stored in the safety-related accumulators may not be adequate to close the MSIV without sufficient assistance from steam flow. The Turkey Point MSIVs are required to close within 5 seconds to mitigate the consequences of a large main steam line break accident. In the event of such an accident, the high steam flow rate would assist in closing the MSIVs. However, MSIV closure also is required for other events in which large steam flow may not exist. Under these conditions and a loss of instrument air pressure, the accumulator air volume may not be sufficient to close the MSIVs. In the regulations, 10 CFR 50. 55a(g) requires that inservice testing to verify operational readiness of pumps and valves whose function is required for safety be accomplished in accordance with Section XI of the ASME Boiler and Pressure Vessel (BPV) Code. The ASME BPV Code, Section XI, 1980 edition through winter 1980 addenda, Paragraph IWV-3415, requires that fail-safe valves be tested by observing the operation of the valves upon loss of actuator power. Since the MSIVs have been identified as fail-safe valves they should have been tested with the instrument air supply, as well as electric power, removed. Proper testing would have revealed the inadequate accumulators much earlier. Discussion: The practice of performing inservice testing of components, which are relied on to mitigate the consequences of accidents, with sources of power not considered in the safety analyses is not in keeping with the objective of periodic test- ing. This objective is to test equipment to verify operational readiness under conditions that reasonably duplicate the design basis. When such testing was performed at Turkey Point, it was shown that with low or no steam flow, MSIV closure could only be assured with instrument air powering the actuator. Continued operation at Turkey Point has been justified by the availability of two instrument air systems as backups and by procedures that require plant shutdown if the instrument air supply is lost. In addition, design modifica- tions are being implemented on an expedited basis that will ensure MSIV closure in 5 seconds without steam flow assistance or non-safety-related instrument air power. These modifications also will resolve the testing deficiency noted above. IN 85-84 October 30, 1985 Page 3 of 3 No specific action or written response is required by this information notice. If you have any questions about this matter, please contact the Regional Administrator of the appropriate regional office or this office. `i. ordan, Director Division f Emergency Preparedness and Engineering Response Office of Inspection and Enforcement Technical Contact: Vern Hodge, IE (301) 492-7275 Attachment: List of Recently Issued IE Information Notices Attachment 1 IN 85-84 October 30, 1985 LIST OF RECENTLY ISSUED IE INFORMATION NOTICES Information Date of Notice No. Subject Issue Issued to 85-83 Potential Failures Of General 10/30/85 All power reactor Electric PK-2 Test Blocks facilities holding an OL or CP 85-82 Diesel Generator Differen- 10/18/85 All power reactor tial Protection Relay Not facilities holding Seismically Qualified an OL or CP 85-81 Problems Resulting In 10/17/85 All power reactor Erroneously High Reading facilities holding With Panasonic 800 Series an OL or CP and Thermoluminescent Dosimeters certain material and fuel cycle licensees 85-80 Timely Declaration Of An 10/15/85 All power reactor Emergency Class Implementa- facilities holding tion Of An Emergency Plan, an OL or CP And Emergency Notifications 85-17 Possible Sticking Of ASCO 10/1/85 All power reactor Sup. 1 Solenoid Valves facilities holding an OL or CP 85-79 Inadequate Communications 9/30/85 All power reactor Between Maintenance, facilities holding Operations, And Security an OL or CP; research Personnel and nonpower reactor facilities; fuel fabrication and processing facilities 85-78 Event Notification 9/23/85 All power reactor facilities holding an OL or CP 85-77 Possible Loss Of Emergency 9/20/85 All power reactor Notification System Due To facilities holding Loss Of AC Power an OL or CP OL = Operating License CP = Construction Permit SSINS No. : 6835 IN 85-83 UNITED STATES NUCLEAR REGULATORY COMMISSION OFFICE OF INSPECTION AND ENFORCEMENT WASHINGTON, D.C. 20555 October 30, 1985 IE INFORMATION NOTICE NO. 85-83: POTENTIAL FAILURES OF GENERAL ELECTRIC PK-2 TEST BLOCKS Addressees: All nuclear power reactor facilities holding an operating license (OL) or a construction permit (CP). Purpose: This information notice is to alert recipients of a potentially significant problem involving fractures of PK-2 test block terminal posts that could lead to inoperability of essential electrical equipment. It is expected that recipients will review this information for applicability to their facilities and consider actions, if appropriate, to preclude a similar problem occurring at their facilities. However, suggestions contained in this information notice do not constitute NRC requirements; therefore, no specific action or written response is required. Description of Circumstances: The Tennessee Valley Authority (TVA) reported to General Electric (GE) and the NRC that the Sequoyah Nuclear Power Plant experienced fracture failure of terminal posts on some PK-2 test blocks during routine testing of a circuit that was not safety related. TVA subsequently tested PK-2 blocks at the Watts Bar Nuclear Plants and found that terminal post fractures could be induced, in some cases, by wiggling by hand. No failures were identified by TVA on PK-2 safety-related applications. GE is investigating to determine the root cause of the failures. However, because of the broad usage of the test blocks, GE has notified the NRC that GE is unable to determine all of the possible PK-2 class IE installations and therefore is unable to assure specific notification of the problem to each utility. Discussion: Failure of PK-2 test blocks could occur either during testing or at other times. Failure during circuitry testing could result in the inoperability of essential electrical equipment. In this case, the loss of the electrical equipment would be detected during the testing. The possibility also exists for the fracture failure to occur at the completion of the circuit testing or as the result of bumping during other maintenance. Such an occurrence would 8510250543 IN 85-83 October 30, 1985 Page 2 of 2 result in an open circuit and the unavailability of the associated electrical equipment could go undetected in certain applications. Though the failures noted by TVA were not safety related, the usage of PK-2 test blocks includes safety related equipment such as emergency diesel generator relay boards. In addition to the possible loss of safety related equipment there is a potential personnel safety concern if an open circuit is developed on a current trans- former circuit during testing. General Electric has recommended that, in addition to visual inspection, a force of about five pounds in any direction perpendicular to the terminal posts can be applied to detect incipient failures. No specific action or written response is required by this information notice. If you have any questions about this matter, please contact the Regional Administrator of the appropriate regional office or this office. Edward Jordan, for Divisi of Emergency Preparedness and gineering Response Office of Inspection and Enforcement Technical Contact: James C. Stewart, IE (301) 492-9061 Attachment: List of Recently Issued IE Information Notices Attachment 1 IN 85-83 October 30, 1985 LIST OF RECENTLY ISSUED IE INFORMATION NOTICES Information Date of Notice No. Subject Issue Issued to 85-82 Diesel Generator Differen- 10/18/85 All power reactor tial Protection Relay Not facilities holding Seismically Qualified an OL or CP 85-81 Problems Resulting In 10/17/85 All power reactor Erroneously High Reading facilities holding With Panasonic 800 Series an OL or CP and Thermoluminescent Dosimeters certain material and fuel cycle licensees 85-80 Timely Declaration Of An 10/15/85 All power reactor Emergency Class Implementa- facilities holding tion Of An Emergency Plan, an OL or CP And Emergency Notifications 85-17 Possible Sticking Of ASCO 10/1/85 All power reactor Sup. 1 Solenoid Valves facilities holding an OL or CP 85-79 Inadequate Communications 9/30/85 All power reactor Between Maintenance, facilities holding Operations, And Security an OL or CP; research Personnel and nonpower reactor facilities; fuel fabrication and processing facilities 85-78 Event Notification 9/23/85 All power reactor facilities holding an OL or CP 85-77 Possible Loss Of Emergency 9/20/85 All power reactor Notification System Due To facilities holding Loss Of AC Power an OL or CP 85-76 Recent Water Hammer Events 9/19/85 All power reactor facilities holding an OL or CP OL = Operating License CP = Construction Permit OMB No.: 3150-0011 Expiration Date: 9/30/86 IEB 85-01 UNITED STATES NUCLEAR REGULATORY COMMISSION OFFICE OF INSPECTION AND ENFORCEMENT WASHINGTON, D.C. 20555 October 29, 1985 IE BULLETIN 85-01: STEAM BINDING OF AUXILIARY FEEDWATER PUMPS Addressees: For Action - Those nuclear power reactor facility licensees and construction permit (CP) holders listed in Attachment 1. For Information - All other nuclear power reactor facilities. Purpose: The purpose of this bulletin is to inform licensees and CP holders of a poten- tially serious safety problem that has occurred at certain operating facilities involving the inoperability of auxiliary feedwater (AFW) pumps as a result of steam binding. Certain PWR licensees and all PWR CP holders are requested to take further action to prevent similar events from occurring at their facili- ties and to document those actions taken or planned. Description of Circumstances: Numerous events have been reported where hot water has leaked into AFW systems and flashed to steam, disabling the AFW pumps. Events at Robinson 2 in 1981 through 1983, Crystal River 3 in 1982 and 1983, and D. C. Cook 2 in 1981 were summarized in IE Information Notice (IN) 84-06, issued in January 1984. Also in January 1984, the Institute of Nuclear Power Operations (INPO) issued Significant Event Report (SER) 5-84 detailing events at Robinson 2 and Farley. In April 1984, INPO issued Significant Operating Experience Report (SOER) 84-3 that discussed another event at Surry 2 in 1983. The NRC's Office for Analysis and Evaluation of Operational Data (AEOD) issued a case study report entitled "Steam Binding of Auxiliary Feedwater Pumps" in July 1984. This study identified 22 events since 1981; 13 of these occurring in 1983. Based on operating experience, it appears that backleakage into AFW could occur in any PWR. In a number of plants, the two motor-driven pumps feed into a single pipe which feeds into the steam generator; therefore, a leaking valve in that pipe increases the probability of steam binding in both trains of AFW. Also, multiple AFW pumps often take suction from a common manifold; therefore, if one pump becomes steam bound because of leaking check valves, the steam can heat the common suction and cause other pumps to become steam bound. 8510250539 IEB 85-01 October 29, 1985 Page 2 of 4 AFW capability is needed for normal shutdown and transient conditions as well . as for accident mitigation. The AEOD case study examined the effects of steam binding on a sequence in which there was a loss of the power conversion (steam generation) system after a transient other than loss-of-offsite power. A probabilistic risk analysis had previously shown this sequence to be a dominant contributor to the core-melt risk for a sample plant (Sequoyah) . The case study indicated that unavailability of the AFW system as a result of steam binding contributes significantly to the risk of core melt in PWRs. Monitoring AFW to detect backleakage and to promptly correct the situation if backleakage occurs would reduce the probability of steam binding. Since the AEOD study was issued, a series of events involving backflow of hot water into the AFW system occurred at McGuire 2 over a period of 7 days in August 1984, before effective corrective action was taken. One of these events involved overpressurization of the suction line and damage to instruments. In November 1984, Catawba 1 experienced backflow of hot water into AFW resulting in fumes from insulation and blistering of paint. In December 1984, the NRC's Office of Nuclear Reactor Regulation (NRR) determined that steam binding of AFW was a generic issue and assigned it a high priority (Generic Issue 93, "Steam Binding of Auxiliary Feedwater Pumps") . To determine the extent of the safety issue and the need for short-term correc- tive actions, the NRC's regional offices conducted a survey in April and May of 1985. Of the 58 operating reactors surveyed, 39 had temperature monitoring of AFW piping at least once per shift. Of the remaining 19, 17 had normally closed gate or globe valves in the pump discharge path in addition to check valves, or some unique feature such as complete separation of trains that made serious safety problems unlikely. The remaining 2 licensees have subsequently decided to monitor AFW piping temperature. Although some degree of action has been taken at all units, many have not incorporated these actions into procedures to detect or correct steam binding. Without these provisions, there is little assurance that effective actions will continue. For this reason, the addressees are requested to take the following actions: Action for Addressees Listed in Attachment 1 1. Develop procedures for monitoring fluid conditions within the AFW system on a regular basis during times when the system is required to be operable. This monitoring should ensure that fluid temperature at the AFW pump discharge is maintained at about ambient temperature. Monitoring of fluid conditions, if used as the primary basis for precluding steam binding, is recommended each shift. This item is not intended to require elaborate instrumentation. A simple means of monitoring temperature, such as touching the pipe, is a satisfac- tory approach. 2. Develop procedures for recognizing steam binding and for restoring the. AFW system to operable status, should steam binding occur. IN 85-84 October 30, 1985 Page 3 of 3 No specific action or written response is required by this information notice. If you have any questions about this matter, please contact the Regional Administrator of the appropriate regional office or this office. edY. ordan, Director Division f Emergency Preparedness and Engineering Response Office of Inspection and Enforcement Technical Contact: Vern Hodge, IE (301) 492-7275 Attachment: List of Recently Issued IE Information Notices Attachment 1 IN 85-84 October 30, 1985 LIST OF RECENTLY ISSUED IE INFORMATION NOTICES Information Date of Notice No. Subject Issue Issued to 85-83 Potential Failures Of General 10/30/85 All power reactor Electric PK-2 Test Blocks facilities holding an OL or CP 85-82 Diesel Generator Differen- 10/18/85 All power reactor tial Protection Relay Not facilities holding Seismically Qualified an OL or CP 85-81 Problems Resulting In 10/17/85 All power reactor Erroneously High Reading facilities holding With Panasonic 800 Series an OL or CP and Thermoluminescent Dosimeters certain material and fuel cycle licensees • 85-80 Timely Declaration Of An 10/15/85 All power reactor Emergency Class Implementa- facilities holding tion Of An Emergency Plan, an OL or CP And Emergency Notifications 85-17 Possible Sticking Of ASCO 10/1/85 All power reactor Sup. 1 Solenoid Valves facilities holding an OL or CP 85-79 Inadequate Communications 9/30/85 All power reactor Between Maintenance, facilities holding Operations, And Security an OL or CP; research Personnel and nonpower reactor facilities; fuel fabrication and processing facilities 85-78 Event Notification 9/23/85 All power reactor facilities holding an OL or CP 85-77 Possible Loss Of Emergency 9/20/85 All power reactor Notification System Due To facilities holding Loss Of AC Power an OL or CP OL = Operating License CP = Construction Permit Hello