skip navigation links 
 
 Search Options 
Index | Site Map | FAQ | Facility Info | Reading Rm | New | Help | Glossary | Contact Us blue spacer  
secondary page banner Return to NRC Home Page

Palo Verde 2
3Q/2008 Plant Inspection Findings


Initiating Events

Significance:a graphic of the significance Jun 30, 2008
Identified By: Self-Revealing
Item Type: FIN Finding
Failure to Evaluate Design Changes Leads to a Manual Reactor Trip
A self revealing finding of Procedure 81DP-0DC13, "Deficiency Work Order," Revision 13, was identified for the failure of engineering personnel to ensure modifications do not inadvertently affect design basis plant conditions. Specifically, between January 23, 2001 and October 6, 2007, engineering personnel failed to ensure material compatibility of the condenser air removal system seal water cooler tube plugs to prevent corrosion. This resulted in sodium ingress into the condenser hotwell and steam generators due to a corroded tube plug that failed in the condenser air removal system D seal water cooler, and consequently a manual reactor scram. This issue was entered into the licensee's corrective action program as Condition Report/Disposition Request 3074272.

The finding is greater than minor because it is associated with the design control attribute of the initiating events cornerstone and affects the cornerstone objective to limit the likelihood of those events that upset plant stability and challenge critical safety functions during shutdown and power operations. Using Manual Chapter 0609.04, "Phase 1 – Initial Screening and Characterization of Findings," the finding is determined to have very low safety significance because the finding did not result in exceeding the technical specification limit for identified reactor coolant system leakage, did not affect other mitigation systems, did not contribute to both the likelihood of a reactor trip and the likelihood that mitigation equipment or functions will not be available; and did not increase the likelihood of a fire or internal/external flood. This finding was evaluated as not having a crosscutting aspect because the performance deficiency is not indicative of current performance.

Inspection Report# : 2008003 (pdf)

Significance:a graphic of the significance Jun 30, 2008
Identified By: Self-Revealing
Item Type: NCV NonCited Violation
Fire in Pressurizer Cubicle due to Poor Work Practices
A self-revealing noncited violation of License NPF 51, Condition 2.C. (6), was identified involving the failure to follow procedures for proper control of ignition sources. Specifically, contract welding personnel failed to deenergize welding equipment and properly secure the welding rod electrodes, resulting in a fire in the Unit 2 pressurizer cubicle inside containment. This issue was entered into the licensee's corrective action program as Condition Report/Disposition Request 3170965.

The finding is greater than minor because it is associated with the external factors attributes of the initiating events cornerstone and affected the cornerstone objective of limiting the likelihood of those events that upset plant stability and challenge critical safety functions during shutdown as well as power operations. Manual Chapter 0609, "Significance Determination Process," Appendix M, "Significance Determination Process Using Qualitative Criteria," was used since the Manual Chapter 0609, Appendix F, "Fire Protection Significance Determination Process," does not address the potential risk significance of fire protection findings during shutdown conditions. The finding was determined to be of very low safety significance by NRC management review because the finding occurred while the unit was already in a cold shutdown condition and the finding did not affect equipment necessary to maintain safe shutdown. This finding has a crosscutting aspect in the area of human performance associated with work practices because the licensee did not ensure supervisory and management oversight of work activities, including contractors, such that nuclear safety is supported [H.4(c)].

Inspection Report# : 2008003 (pdf)

Significance:a graphic of the significance Jun 30, 2008
Identified By: Self-Revealing
Item Type: FIN Finding
Failure to Resolve Discrepancies Between Installed Equipment and Work Instructions Results in Mis-positioning Event
A self revealing finding was identified for the failure of operations and maintenance personnel to follow Procedure 01DP-9ZZ01, "Systematic Troubleshooting," and resolve a discrepancy with a work instruction prior to proceeding with troubleshooting. Specifically, maintenance and operations personnel did not resolve an error in Work Order 3174332 when troubleshooting Breaker NBN-S01A that failed to trip, resulting in a loss of the non vital electrical bus that supplied power to the nuclear cooling water and normal chilled water systems. This issue was entered into the licensee's corrective action program as Palo Verde Action Request 3174647.

The finding is greater than minor because it is associated with the initiating events cornerstone attribute of configuration control and affects the cornerstone objective to limit the likelihood of those events that upset plant stability and challenge critical safety functions during shutdown and power operations. Using the Manual Chapter 0609 Appendix G, "Shutdown Operations Significance Determination Process," the finding is determined to have very low safety significance because the finding did not result in a loss of shutdown safety functions. This finding has a crosscutting aspect in the area of human performance associated with work practices because maintenance and operations personnel proceeded in the face of uncertainty or unexpected circumstances [H.4(a)].

Inspection Report# : 2008003 (pdf)

Significance:a graphic of the significance Jun 30, 2008
Identified By: Self-Revealing
Item Type: NCV NonCited Violation
Inadvertent Decrease in Reactor Water Level Due to Personnel Error
A self-revealing noncited violation of Technical Specification 5.4.1, "Procedures," was identified for the failure of operations personnel to adequately implement Procedure 40DP 9OP19, "Locked Valve, Breaker, and Component Tracking." Specifically, on May 14, 2008, Valve SIA V421 was found out of its locked closed position one and one-half turns open resulting in approximately 930 gallons of water being inadvertently transferred from the reactor coolant system to the refueling storage water tank. This issue has been entered into the licensee's corrective action program as Palo Verde Action Request 3174527.

The failure to ensure the valve was properly closed resulted in an inadvertent reactor vessel level decrease. The finding is more than minor because it is associated with the configuration control attribute of the initiating events cornerstone and affected the cornerstone objective of limiting the likelihood of those events that upset plant stability and challenge critical safety functions during shutdown operations. A Phase 2 analysis was required because using Manual Chapter 0609, Appendix G, "Shutdown Operations Significance Determination Process," Attachment 1, the inspectors determined that the finding actually resulted in a loss of reactor coolant system inventory. Using the Phase 2 worksheets in Attachment 2, this was determined to be a loss of level control precursor event. The initiating event likelihood for this finding was determined from Table 1 of the worksheet and the resultant core damage frequency was determined to be 1E-8, therefore the finding screened as having very low safety significance. The finding has a crosscutting aspect in the area of human performance associated with work practices because the licensee failed to use human error prevention techniques such as self-checking [H.4(a)].
Inspection Report# : 2008003 (pdf)

Significance:a graphic of the significance Nov 02, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Inadequate Implementation of Risk Management Actions and Risk Assessments for the Switchyard
Green. The team identified a noncited violation of 10 CFR 50.65(a)(4) for the failure to adequately assess the increase in risk and effectively implement risk mitigation actions for maintenance activities in the switchyard. Specifically, the switchyard was not being protected by controlling access and movement as required and the risk modeling did not include all work being performed. The Unit 1 shift manager and the switchyard coordinator were unaware of the movement of multiple vehicles and pieces of equipment in or near restricted areas and not all maintenance was included in the schedule provided to the switchyard coordinator for risk review. This issue was entered into the licensee’s corrective action program as Palo Verde Action Request 3078392.

This finding is greater than minor because the licensee’s risk assessment failed to consider maintenance activities that could increase the likelihood of initiating events such as work in the switchyard and failed to effectively manage compensatory measures. Inspection Manual Chapter 0609, “Significance Determination Process,” Appendix K, “Maintenance Risk Assessment and Risk Management Significance Determination Process,” was used to assess the significance. Using data from the licensee’s probabilistic risk assessment, a NRC Region IV senior reactor analyst calculated the risk deficit. Based on the magnitude of the calculated risk deficit being less than 1E-6/year, this finding is determined to be of very low safety significance. The cause of this finding has crosscutting aspects associated with work control of the human performance area in that the licensee did not appropriately coordinate switchyard activities incorporating risk insights (H.3.(a)) and did not communicate with each other during activities in which coordination is necessary to assure plant and human performance (H.3.(b)).

Inspection Report# : 2007012 (pdf)


Mitigating Systems

Significance:a graphic of the significance Jun 30, 2008
Identified By: NRC
Item Type: NCV NonCited Violation
Inadequate Work Instructions for Reinstallation of Constant Support Hanger
The inspectors identified a noncited violation of Technical Specification 5.4.1.a, "Procedures," for the failure to establish and implement adequate maintenance procedures. These inadequate instructions resulted in the failure to install required washers during installation of a constant support spring hanger for a main steam line on May 14, 2008. This issue was entered into the licensee corrective action program as Condition Report/Disposition Request 3177622.

The finding is greater than minor because it is associated with the procedure quality attribute of the mitigating systems cornerstone and affects the cornerstone objective of ensuring the reliability and capability of systems that respond to initiating events to prevent undesirable consequences. Using Manual Chapter 0609.04, "Phase 1 – Initial Screening and Characterization of Findings," the finding was determined to have a very low safety significance because the finding did not result in a loss of system safety function, an actual loss of safety function of a single train for greater than its Technical Specification allowed outage time, or screen as potentially risk-significant due to a seismic, flooding, or severe weather initiating event. This finding has a crosscutting aspect in the area of human performance associated with resources because the licensee failed to ensure work packages were complete, accurate and included up-to-date design documentation to assure nuclear safety [H.2(c)].

Inspection Report# : 2008003 (pdf)

Significance:a graphic of the significance Jun 30, 2008
Identified By: Self-Revealing
Item Type: NCV NonCited Violation
Failure to Prevent Recurrence of a Significant Condition Adverse to Quality for the Feedwater Isolation Valves
A self revealing noncited violation of 10 CFR Part 50, Appendix B, Criterion XVI, "Corrective Actions," was identified for the failure of engineering personnel to implement adequate corrective actions to preclude recurrence of a significant condition adverse to quality. Specifically, between June 28, 1998 and July 17, 2006, on several occasions, the four way 'N' valve for an economizer main feedwater isolation valve became lodged in the center blocked position, preventing fast closure of the main feedwater isolation valve upon receipt of a main steam isolation signal. This issue was entered into the licensee's corrective action program as Condition Report/Disposition Request 2915450.

This finding is greater than minor because it is associated with the equipment performance attribute of the mitigating systems cornerstone and affects the cornerstone objective of ensuring the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. A Phase 2 analysis was required because using Manual Chapter 0609.04, "Phase 1 – Initial Screening and Characterization of Findings," there was a loss of main feedwater isolation of a single train to Steam Generator 1 for greater than the Technical Specification allowed outage time. Using the Phase 2 worksheets associated with a steam generator tube rupture without steam generator isolation, the finding is determined to have very low safety significance since all remaining mitigation capability was available or recoverable. This finding was evaluated as not having a crosscutting aspect because the performance deficiency is not indicative of current performance.

Inspection Report# : 2008003 (pdf)

Significance:a graphic of the significance Mar 31, 2008
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Establish Preventative Maintenance Procedures for Emergency Diesel Generator Fuel Oil Injection Pump O-Rings
The inspectors identified a non-cited violation of Technical Specification 5.4.1.a for the failure of operations and engineering personnel to establish and implement maintenance procedures for inspection and replacement of items that have a specific lifetime. Specifically, between February 12, 2007 and March 7, 2008, operations and engineering personnel failed to inspect or replace the emergency diesel generators fuel oil injection pump upper O-rings prior to the end of their service life resulting in fuel leakage and increased unavailability and unreliability of Unit 1 Train A, Unit 2 Train B, and Unit 3 Train B emergency diesel generators. This issue was entered into the licensee's corrective action program as Palo Verde Action Request 3143422.

This finding is greater than minor because it is associated with the equipment performance attribute of the mitigating systems cornerstone and affects the cornerstone objective of ensuring the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. Using the Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the finding is determined to have very low safety significance because it did not represent a loss of system safety function, an actual loss of safety function of a single train for greater than its technical specification allowed outage time, or screen as potentially risk-significant due to a seismic, flooding, or severe weather initiating event. This finding has a crosscutting aspect in the area of problem identification and resolution associated with operating experience because the licensee failed to use available operating experience, including vendor recommendations, to implement and institutionalize operating experience through changes to station processes, procedures, equipment, and training programs [P.2(b)].

Inspection Report# : 2008002 (pdf)

Significance:a graphic of the significance Mar 31, 2008
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Maintain Adequate Staffing Levels Results in Heavy Use of Overtime to Maintain Adequate Shift Coverage
The inspectors identified a non-cited violation of Technical Specification 5.2.2.d involving the routine use of excessive overtime for operations personnel that performed safety-related functions. Specifically, between January 1 and December 31, 2007, operations personnel routinely used excessive overtime. This issue was entered into the licensee’s corrective action program as Condition Report/Disposition Request 3112231.

The finding is greater than minor because if left uncorrected the finding would become a more significant safety concern in that the routine use of excessive work hours increases the likelihood of operator errors. Using the IMC 0609, "Significance Determination Process," Appendix M, the finding is determined to have very low safety significance because there was no recent instances where findings of low to moderate (White) or greater significance were attributed to the increased use of overtime by operating personnel. The finding has a crosscutting aspect in the area of human performance associated with resources because the licensee failed to maintain sufficient qualified operations personnel to maintain working hours within guidelines without the excessive use of overtime [H.2(b)].

Inspection Report# : 2008002 (pdf)

Significance:a graphic of the significance Mar 31, 2008
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Properly Implement Corrective Action Process for Potential Operability Issues with the Class 1E 125 V DC System
The inspectors identified a non-cited violation of 10 CFR Part 50, Appendix B, Criterion V, "Instructions, Procedures, and Drawings," for the failure of engineering personnel to ensure that potentially nonconforming conditions associated with the Class 1E 125 Vdc system were reviewed for operability. Specifically, between September 29, 2007 and March 7, 2008, engineering personnel failed to ensure all relevant information was reviewed for operability when it was determined that vendor recommended preventative maintenance tasks were not being performed on the Class 1E 125 Vdc system. This issue was entered into the licensee's corrective action program as Palo Verde Action Request 3144707.

This finding is greater than minor because it is associated with the equipment performance attribute of the mitigating systems cornerstone and affects the cornerstone objective to ensure the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. Using the Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the finding is determined to have very low safety significance because it did not represent a loss of system safety function, an actual loss of safety function of a single train for greater than its technical specification allowed outage time, or screen as potentially risk-significant due to a seismic, flooding, or severe weather initiating event. This finding has a crosscutting aspect in the area of human performance associated with decision making because safety significant decisions were not verified to validate underlying assumptions and identify unintended consequences [H.1(b)].

Inspection Report# : 2008002 (pdf)

Significance:a graphic of the significance Mar 31, 2008
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Identify Inoperable Feedwater Isolation Valve Exceeds Technical Specification Allowed Outage Time
A self revealing non-cited violation of Technical Specification 3.7.3.c was identified for the failure of operations personnel to perform the actions required for an inoperable main feedwater isolation valve. Specifically, on July 17, 2006, operations personnel failed to perform actions to place the unit in Mode 3 within 6 hours and Mode 5 within 36 hours, as required by Technical Specification 3.7.3.c, for an inoperable main feedwater isolation valve that had not been closed or isolated in 72 hours, as required by Technical Specification 3.7.3.a. This resulted in main feedwater isolation Valve 2JSGAUV0174 to steam Generator A exceeding the Technical Specification 3.7.3 allowed outage time. This issue was entered into the licensee's corrective action program as Condition Report/Disposition Request 2915450.

This finding is greater than minor because it is associated with the equipment performance attribute of the mitigating systems cornerstone and affects the cornerstone objective to ensure the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. A Phase 2 analysis was required because the Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, determined that there was a loss of main feedwater isolation of a single train to steam Generator A for greater than the technical specification allowed outage time. Using the Phase 2 Worksheets associated with a steam generator tube rupture without steam generator isolation, the finding is determined to have very low safety significance since all remaining mitigation capability was available or recoverable.

Inspection Report# : 2008002 (pdf)

Significance:a graphic of the significance Dec 31, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
TWO EXAMPLES OF FAILURE TO PROPERLY IMPLEMENT THE OPERABILITY DETERMINATION PROCESS
The inspectors identified two examples of a noncited violation of 10 CFR Part 50, Appendix B, Criterion V, "Instructions, Procedures and Drawings," for the failure of operations personnel to follow procedures and adequately evaluate degraded and nonconforming conditions to support operability decision-making. On September 12 and October 29, 2007, operations personnel failed to adequately evaluate degraded and nonconforming conditions to support operability decision-making as described in Procedure 40DP-9OP26. Specifically, operations personnel failed to adequately evaluate the operability of the Unit 2 Train B emergency diesel generator after a lowering turbocharger lube oil pressure indication and the Unit 1 Train A auxiliary feedwater system during a body to bonnet steam leak on manual isolation Valve SGE-V886 for the steam supply to auxiliary feedwater Pump A bypass Valve SGA-UV-138A. This issue was entered into the corrective action program as Condition Report/Disposition Request 3068929 and Palo Verde Action Request 3084439.

The finding is greater than minor because the degraded turbocharger lube oil filter is associated with the equipment performance attribute of the mitigating systems cornerstone and affects the associated cornerstone objective to ensure the availability, reliability, and capability of systems that respond to initiating events to prevent undesirable consequences. Additionally, the steam leak on manual isolation Valve SGE-V886 is associated with the structure, system, and component and barrier performance attribute of the barrier integrity cornerstone and affects the associated cornerstone objective to provide reasonable assurance that physical design barriers protect the public from radionuclide releases caused by accidents or events. Using the Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the finding is determined to have very low safety significance because the finding did not result in a loss of safety function under the mitigating systems cornerstone and did not result in an actual open pathway in the physical integrity of the reactor containment under the containment barriers cornerstone. The example of this finding related to lowering turbocharger lube oil pressure has a crosscutting aspect in the area of human performance associated with decision-making because the licensee did not use conservative assumptions for operability decision-making when evaluating degraded and nonconforming conditions (H.1(b)). The example of this finding related to the body to bonnet steam leak has a crosscutting aspect in the area of problem identification and resolution associated with the corrective action program because the licensee did not properly classify, and thoroughly evaluate the operability for a condition adverse to quality (P.1(c)).

Inspection Report# : 2007005 (pdf)

Significance:a graphic of the significance Oct 26, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Eight Examples of the Failure to Implement the operability Determination Process
Green. The team identified a noncited violation of 10 CFR Part 50, Appendix B, Criterion V, "Instructions, Procedures, and Drawings," with eight examples for the failure of the licensee to adequately evaluate degraded and unanalyzed conditions to support operability decision making between May 2006 and October 26, 2007. The team noted a significant number of weak or non-existent operability evaluations of degraded conditions affecting safety-related equipment. There was a lack of understanding of the need to assess operability for some conditions adverse to quality and a lack of knowledge or skills necessary to conduct quality operability assessments. The examples of the violation involved two instances of conditions adverse to quality documented in databases outside of the corrective action program, missile hazards near the essential spray pond, two issues effecting essential cooling water system heat exchangers, 480V and 4160V motor terminations, oil leaks on the emergency diesel generators, and high lead content in a Unit 3 low pressure safety injection pump. Each of the individual technical issues was entered into the licensee’s corrective action program.

These examples associated with this finding are greater than minor because they were associated with the mitigating systems cornerstone attribute of equipment performance and affected the cornerstone objective of ensuring the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. Using the Inspection Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the examples associated with this finding are determined to have very low safety significance since they only affected the mitigating systems cornerstone and did not represent a loss of system safety function. The causes of the examples of this finding have crosscutting aspects associated with decision making of the human performance area in that operations and engineering personnel (1) did not make safety significant decisions using a systematic process (H.1.(a)), and (2) failed to use conservative assumptions for operability decision-making when evaluating degraded and nonconforming conditions (H.1.(b)). The causes of the examples of this finding also have crosscutting aspects associated with evaluation and corrective action of the problem identification and resolution area in that licensee personnel (1) did not assess conditions adverse to quality for impacts to the operability of safety- related equipment (P.1.(c), and (2) did not address safety issues in a timely manner P.1.(d)). The causes of the examples of this finding also related to the safety culture component of accountability in that workers and managers failed to demonstrate a proper safety focus and reinforce safety principles (O.1.(b) and O.1.(c)).

Inspection Report# : 2007012 (pdf)

Significance:a graphic of the significance Oct 25, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Establish maintenance Rule Goals for the Safety Injection System
Green. The team identified a noncited violation of 10 CFR 50.65, for the failure of engineering personnel to establish goals and monitor the performance of the safety injection system. Specifically, on March 22, 2007, engineering personnel failed to establish goals to properly monitor system performance, or provide a technical justification to demonstrate that monitoring under 10 CFR 50.65(a)(1) was not required for the safety injection system following the system changing status from 10 CFR 50.65(a)(2) to 10 CFR 50.65(a)(1). This issue was entered into the corrective action program as Palo Verde Action Requests 3074255 and 3076699.

This finding is greater than minor because it was associated with the mitigating systems cornerstone attribute of equipment performance and affected the cornerstone objective of ensuring the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. Using the Inspection Manual Chapter 0609, "Significant Determination Process," Phase 1 Worksheets, the finding is determined to have very low safety significance since there was no loss of safety function. The cause of this finding has crosscutting aspects associated with (1) corrective actions of the problem identification and resolution area in that engineering personnel failed to take appropriate actions to address safety issues and adverse trends in a timely manner (P.1.(d)) and self assessment of the problem identification and resolution area in that engineering personnel did not perform self assessments that were comprehensive, objective, and self critical (P.3.(a)).

Inspection Report# : 2007012 (pdf)

Significance:a graphic of the significance Oct 10, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Six Examples of a Failure to Implement the Corrective Action Program Requirements
Green. The team identified a noncited violation of 10 CFR 50, Appendix B, Criterion XVI, “Corrective Action,” with six examples for the failure of the licensee to identify, evaluate, or correct conditions adverse to quality between 1988 and October 10, 2007. The corrective actions implemented by the licensee to address the substantive human performance and problem identification and resolution crosscutting issues were ineffective in sustaining performance improvement as noted by licensee self assessments, external industry reviews, and NRC inspections. The team also identified several examples of poor and inconsistent implementation of corrective action program behaviors. The examples of the violation involved not entering the use of unqualified tape in containment in the corrective action process, evaluating the condition, or taking timely actions to remove the tape from all three units; not identifying, evaluating, or implementing timely corrective actions associated with operating experience applicable to the auxiliary feedwater pump trip and throttle valve; not implementing timely corrective actions for water intrusion and flooding of underground manholes and cable vaults; inadequate evaluation for nonconforming Target Rock reed switches; not evaluating and correcting a degraded condition with post accident monitoring instrument chart recorders, and not correcting a degraded/nonconforming condition associated with 3 inch Borg-Warner check valves. Each of the individual technical issues was entered into the licensee’s corrective action program.

The examples associated with this finding are greater than minor because they were associated with the mitigating systems cornerstone attribute of equipment performance and affected the cornerstone objective of ensuring the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. Using the Inspection Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the examples associated with this finding are determined to have very low safety significance since they only affected the mitigating systems cornerstone and did not represent a loss of system safety function. The causes of the examples of this finding have crosscutting aspects associated with decision making of the human performance area in that operations and engineering personnel failed to use conservative assumptions for operability decision-making when evaluating degraded and nonconforming conditions (H.1.(b)). The causes of the examples of this finding have crosscutting aspects associated with (1) corrective actions of the problem identification and resolution area because the licensee failed to evaluate previous issues such that resolutions addressed all conditions affecting operability (P.1.(c)), (2) operating experience of the problem identification and resolution area in that engineering personnel failed to ensure implementation and institutionalization of operating experience through changes to station processes, procedures, equipment, and training programs (P.2.(b)), and (3) self assessment of the problem identification and resolution area in that the licensee did not follow their benchmarking and self assessment guide to ensure findings were evaluated in their corrective action program (P.3.(c)). The causes of the examples of this finding also related to the safety culture component of accountability in that workforce and management personnel failed to demonstrate a proper safety focus and reinforce safety principles (O.1.(b) and O.1.(c)).

Inspection Report# : 2007012 (pdf)

Significance:a graphic of the significance Oct 10, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Evaluate Performance Monitoring Criteria for the Auxiliary Feedwater System
Green. The team identified a noncited violation of 10 CFR 50.65(a)(2) for the failure of maintenance rule and engineering personnel to demonstrate that the performance or condition of structures, systems, or components was being effectively controlled through appropriate preventive maintenance to ensure systems or components remained capable of performing their intended function. Specifically, between April and October 2007, an inadequate evaluation of maintenance rule performance criteria was performed and, even though the Unit 2 auxiliary feedwater Train A had exceeded its maintenance rule 10 CFR 50.65(a)(2) performance criteria, no goal setting and monitoring was performed as required by 10 CFR 50.65(a)(1) of the maintenance rule. This issue was entered into the corrective action program as Palo Verde Action Request 3075907.

This finding is greater than minor because it was associated with the mitigating systems cornerstone attribute of equipment performance and affected the cornerstone objective of ensuring the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. Using the Inspection Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the finding is determined to have very low safety significance since it only affected the mitigating systems cornerstone and did not represent a loss of system safety function. The cause of this finding has crosscutting aspects associated with self assessments of the problem identification and resolution area in that maintenance rule and engineering personnel failed to perform self assessments that were comprehensive, appropriately objective, and self-critical (P.3.(a)). The cause of this finding has crosscutting aspects associated with decision-making of the human performance area in that engineering personnel failed to make safety-significant or risk-significant decisions using a systematic process (H.1.(a)). The cause of this finding is also related to the safety culture component of accountability in that management did not reinforce safety standards and display behaviors that reflected safety as an overriding priority (O.1.(b)).

Inspection Report# : 2007012 (pdf)

Significance:a graphic of the significance Oct 04, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Implement Adequate Design Controls for Condensate Storage Tank Temperature
Green. The team identified a noncited violation of 10 CFR Part 50, Appendix B, Criterion III, "Design Control," with for the failure to translate design basis requirements into procedures to ensure the plant is operated within its design basis. Specifically, between 1985 and October 2007, the maximum condensate storage tank temperature requirements did not include the effect of recirculated hot condensate water from the main condenser. The issue was entered into the corrective action program as 3073243.

The examples associated with this finding are greater than minor because they were associated with the mitigating systems cornerstone attribute of equipment performance and affected the cornerstone objective of ensuring the availability and reliability of systems that respond to initiating events to prevent undesirable consequences. Using the Inspection Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the examples associated with this finding are determined to have very low safety significance since they only affected the mitigating systems cornerstone and did not represent a loss of system safety function. The causes of the examples of this finding have crosscutting aspects associated with corrective action of the problem identification and resolution area in that engineering personnel did not assess conditions adverse to quality for impacts to the operability of safety related equipment (P.1.(c)).

Inspection Report# : 2007012 (pdf)

Significance: N/A Sep 30, 2006
Identified By: NRC
Item Type: FIN Finding
SUMMARY FINDING. 95002 TEAMS ASSESSMENT OF IR 2004-14 (YELLOW) 10 CFR PART 50, APPENDIX B, CRITERION III, VIOLATION
The NRC performed a followup supplemental inspection to assess the licensee’s corrective actions associated with a Yellow design control finding involving the potential for air entrainment into the emergency core cooling system. The team concluded that the technical issues specifically associated with the voided emergency core cooling system piping have been addressed. However, the Yellow finding will remain open because the licensee did not implement effective corrective actions for all of the causes associated with the Yellow finding. Specifically, the licensee’s actions to improve questioning attitude, technical rigor, and technical review were not fully effective. Also, the implementation of performance measures and metrics to monitor the effectiveness of corrective actions associated with the Yellow finding were not adequate to assess effectiveness. This performance issue was previously characterized as a 10 CFR Part 50, Appendix B, Criterion III, violation having substantial safety significance (Yellow), and was originally identified in NRC Inspection Report 05000528; 05000529; 05000530/2004014.

The licensee’s corrective actions taken in response to the root causes and related programmatic concerns involving questioning attitude, technical rigor, and technical review have not been completely effective. Specifically, following implementation of corrective actions between September 2005 and March 2006, the licensee: (1) continued to conduct inadequate technical reviews of emerging issues; (2) did not routinely question the validity of engineering assumptions used to support operability decisions; (3) did not consistently implement a qualify, validate, and verify process; and (4) did not consistently notify operations personnel of immediate operability concerns.

The team concluded that adequate qualitative or quantitative measures for determining the effectiveness of the corrective actions to prevent recurrence have not been established. For example, not all relevant performance data was considered when performance monitoring measures were developed to assess the effectiveness of corrective actions. When the pertinent data was considered, or otherwise clarified, the performance measures suggested declining rather than improving performance in some areas.

The team also concluded that the licensee had not completed adequate reviews of the effectiveness of corrective actions prior to their notifying the NRC of their readiness for inspection of the Yellow finding. Specifically, several assessments were completed after the requested dated of the inspection (June 2006). Several of the assessments noted that insufficient progress in resolving some of the root and contributing causes had been made. Additionally, a standard guideline for metrics was not issued and implemented until July 2006.

Inspection Report# : 2006010 (pdf)

Significance:a graphic of the significance Mar 16, 2005
Identified By: NRC
Item Type: FIN Finding
FAILURE TO TRACK CONTROL ROOM DISCREPANCIES
The inspectors identified a finding for the failure to follow administrative guidelines provided to operations personnel for identifying, documenting, and tracking main control room deficiencies. Specifically, approximately 75 control room instrument and control room meter face plates in Units 1, 2, and 3 were degraded and were not individually tracked in the control room discrepancy log. Furthermore, discrepancy labels containing the control room discrepancy log number and description of the discrepancy were not placed adjacent to or as close as possible to each affected device. This issue was entered into the corrective action program as Condition Report/Disposition Request 2782501.

The finding is determined to be greater than minor because if left uncorrected, it could become a more significant safety concern in that the condition could cause an operator to take an inappropriate action based on expected plant response or conversely cause an operator not to take action when action is required. The senior reactor analyst determined that this finding was not appropriate to be evaluated using the significance determination process since this finding was associated with multiple human performance actions. Based on management review, the finding is determined to have very low safety significance because it only affected the mitigating systems cornerstone, and there was no adverse impact to plant equipment.

Inspection Report# : 2005002 (pdf)

Significance:a graphic of the significance Dec 09, 2004
Identified By: NRC
Item Type: VIO Violation
FAILURE TO MAINTAIN DESIGN CONTROL OF CONTAINMENT SUMP RECIRCULATION PIPING
The team identified an apparent violation of 10 CFR Part 50, Appendix B, Criterion III, "Design Control," for the failure to establish measures to assure design basis information was translated into specifications, drawings, procedures, and instructions. Specifically, the licensee failed to maintain the safety injection sump suction piping full of water in accordance with the Updated Final Safety Analysis Report. This nonconformance had the potential to significantly affect the available net positive suction head described in the Updated Final Safety Analysis Report for the high pressure safety injection and containment spray pumps, since the analysis assumed the piping would be maintained full of water.
{Note: Finding remains open - IP 95002 results pending 12/16/2005}

This finding is more than minor because it is associated with the equipment performance attribute of the Mitigating Systems cornerstone and adversely affects the cornerstone objective of ensuring the availability, reliability, and capability of systems that respond to initiating events. The NRC assessed this finding through Phase 3 of the Significance Determination Process and made a preliminary determination that the issue had substantial safety significance (Yellow). After considering the information developed during the inspection and the results of testing sponsored by the licensee, the NRC has concluded that this inspection finding is appropriately characterized as Yellow. The final Significance Determination Process letter was issued on April 8, 2005. This issue was inspected within the scope of a Supplemental 95002 Inspection in August - September 2005.

{NOTE: Yellow finding remains open because the corrective actions taken in response to the root causes and related programmatic concerns involving questioning attitude, technical rigor, and operability determinations have not been fully effective. - IP 95002 Supplemental Inspection completed December 2005, IR 05000528/20050112, 05000529/20050112 and 05000530/2005012, IP 95002 Followup Supplemental Inspection completed August 2006, IR 05000528/2006010, 05000529/2006010 and 05000530/2006010}
Inspection Report# : 2004014 (pdf)


Barrier Integrity

Significance:a graphic of the significance Mar 31, 2008
Identified By: NRC
Item Type: NCV NonCited Violation
Inadequate Procedure to Evaluate Foreign Material in the Spent Fuel Pool
The inspectors identified a non-cited violation of 10 CFR Part 50, Appendix B, Criterion V, "Instructions, Procedures, and Drawings," for the failure of fuels services personnel to evaluate leaving foreign material in the Unit 2 spent fuel pool in accordance with procedures, and failed to ensure those procedures included appropriate quantitative and qualitative acceptance criteria. Specifically, between October 13, 2006, and January 31, 2008, fuels services personnel used Procedure 30DP 9MP03, "System Cleanliness and Foreign Material Exclusion Controls," Revision 6, which did not specify acceptance criteria for time to perform a functional assessment of foreign material in the spent fuel pool, resulting in foreign material being left in the spent fuel pool for greater than one year without an evaluation on affected safety systems. This issue was entered into the licensee's corrective action program as Palo Verde Action Request 3126308.

This finding is greater than minor because it is associated with the structure, systems, and component performance and human performance attributes of the barrier integrity cornerstone and affects the cornerstone objective to provide reasonable assurance that physical design barriers (fuel cladding, reactor coolant system, and containment) protect the public from radionuclide releases caused by accidents or events. Using the Manual Chapter 0609, "Significance Determination Process," Phase 1 Worksheets, the finding is determined to have very low safety significance because the finding did not result in loss of cooling to the spent fuel pool; the finding did not result from fuel handling errors that caused damage to the fuel clad integrity or a dropped assembly; and the finding did not result in a loss of spent fuel pool inventory greater than ten percent of the spent fuel pool volume. This finding has a crosscutting aspect in the area of human performance associated with decision making because the licensee failed to use conservative assumptions when evaluating degraded and nonconforming conditions [H.1.(b)].

Inspection Report# : 2008002 (pdf)

Significance:a graphic of the significance Dec 31, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
INADEQUAT DESIGN CONTROLS FOR REFUELING MACHINE
The inspectors identified two examples of a noncited violation of 10 CFR Part 50, Criterion III, "Design Control," for the failure of engineering personnel to ensure that the design bases of the refueling machine were adequately translated into specifications, drawings, procedures, or instructions. Specifically, for the first example, between October 27, 2006, and October 25, 2007, the licensee inappropriately changed the facility as noted in the Updated Final Safety Analysis Report when a modification to the refueling machine introduced a single failure that could result in a failure of both the underload and overload protection features. This change resulted in more than a minimal increase in the consequences of a malfunction, in that the force limits on a fuel assembly grid strap could be exceeded. For the second example, between initial construction and December 5, 2007, procedures and instructions did not limit the stall torque of the hoist motor for the refueling machine. These issues were entered into the corrective action program as Condition Report/Disposition Requests 3030759 and 3068656.

The finding is greater than minor because it would become a more significant safety concern if left uncorrected in that refueling equipment malfunctions could result in damaged fuel. Manual Chapter 0609, Appendix M, "Significance Determination Process Using Qualitative Criteria," was used since the Significance Determination Process methods and tools were not adequate to determine the significance of the finding. This finding affects the barrier integrity cornerstone and is determined to have very low safety significance by NRC management review because it was a deficiency that did not result in the actual degradation of fuel.
Inspection Report# : 2007005 (pdf)


Emergency Preparedness

Significance:a graphic of the significance Jun 30, 2008
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Correct a Risk Significant Planning Standard
The inspectors identified a noncited violation (NCV) of 10 CFR 50.54(q) and 10 CFR Part 50, Appendix E.IV.F.2.g, for the licensee’s failure to correct an identified risk significant planning standard weakness between May 2, 2007 and October 28, 2007. Specifically, the licensee failed to implement adequate corrective actions for identified weaknesses in the ability to correctly make a Site Area Emergency declaration for a steam generator tube rupture event. This issue was entered into the licensee’s correction action program as Palo Verde Action Request 3083911.

The NRC determined that the inability to consistently implement an Emergency Action Level was a performance deficiency within the licensee’s control. This finding is more than minor because it was associated with the Emergency Preparedness attribute of emergency response organization performance and affected the cornerstone objective to implement adequate measures to protect the health and safety of the public because the inability to properly recognize and classify an emergency condition affects the licensee’s ability to implement adequate protective measures. This finding was preliminarily determined to be of low to moderate safety significance. After consideration of information provided during and after a Regulatory Conference held on March 25, 2008, the NRC has concluded that the knowledge deficiency identified among senior operators would not likely result in an incorrect emergency classification during a steam generator tube rupture event, and the NRC has concluded the significance of the inspection finding is appropriately characterized as Green (i.e., a finding of very low safety significance). This violation is being treated as an NCV, consistent with Section VI of the NRC Enforcement Policy. The cause of this finding has crosscutting aspects associated with the corrective action aspect of the problem identification and resolution area in that the licensee failed to thoroughly evaluate problems such that resolutions ensured correcting problems [P.1.(c)]. The cause of this finding was also related to the safety culture component of accountability in that the licensee failed to demonstrate a proper safety focus and reinforce safety principles [O.1.(c)].

Inspection Report# : 2008003 (pdf)

Significance:a graphic of the significance Oct 08, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Inability to Implement Two Emergency Action Levels
Green. The team identified a Green noncited violation of 10 CFR 50.54(q) and §50.47(b)(4), for the failure of the licensee to be able to implement EAL 3-12 and EAL7-1. Specifically, area radiation Monitor RU-18 could not be utilized in the vicinity of the remote shutdown panels and therefore, the emergency classification could not be declared at the Alert level as required in Procedure EPIP-99. In addition, the licensee improperly overclassified EAL 7-1 as an Alert when presented conditions warranting a classification of a Notification of Unusual Event. Specifically, the licensee did not develop a procedure to enable personnel to differentiate between an aircraft and an airliner and therefore, the proper emergency classifications could not be consistently determined. This finding was entered into the licensee’s corrective action program as Condition Report Disposition Requests 3071570, 3071572, and 3085175.

The team determined that the inability to implement EALs was a performance deficiency. The finding was more than minor because it was associated with the Emergency Preparedness attribute of procedure quality and could affect the cornerstone objective associated with the licensee’s ability to correctly classify an emergency condition which would affect the licensee’s ability to implement adequate measures to protect the health and safety of the public. Using the Manual Chapter 0609, "Significance Determination Process," Appendix B, “Emergency Preparedness SDP,” the finding was determined to have very low safety significance because the licensee would be unable to declare one EAL at the Alert and one EAL at the Notification of Unusual Event level. The cause of this finding had crosscutting aspects associated with the corrective action of the PI&R area in that the licensee had previous opportunities to identify the deficiencies (P.1.(a)).

Inspection Report# : 2007012 (pdf)


Occupational Radiation Safety

Significance:a graphic of the significance Dec 31, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
FAILURE TO POST AND CONTROL A HIGH RADIATION AREA
The inspectors reviewed two examples of a self-revealing, noncited violation of Technical Specification 5.7.1 resulting from a failure to control a high radiation area. Specifically, the first example occurred on February 14, 2007, while preparing to perform a remote inspection and boric acid wash down of Unit 2 Letdown Ion Exchange Vessel CHN-D01A, a worker received a dose rate alarm of 141 mr/hr on his electronic dosimeter when he removed the shielded plug from the survey/inspection port. The second example occurred on October 24, 2007, while performing decontamination on Valve SIE-614 using a vacuum in the Unit 3 containment two workers received separate electronic dosimeter alarms of 81 mr/hr and 123 mr/hr approximately 20 minutes apart. The issues were entered into the corrective action program as Condition Report/Disposition Request 2970612 and 3081978.

This finding is greater than minor because it is associated with the occupational radiation safety program and process attribute and affected the cornerstone objective, in that the failure to post and control a high radiation area had the potential to increase personnel dose. This occurrence involved individual workers' unplanned, unintended dose that resulted from actions or conditions contrary to licensee procedures, radiation work permit, and technical specifications, therefore this finding was evaluated using the Occupational Radiation Safety Significance Determination Process. The inspectors determined that this finding was of very low safety significance because it did not involve: (1) an ALARA planning or work control issue, (2) an overexposure, (3) a substantial potential for overexposure, or (4) an impaired ability to assess dose. This finding involved crosscutting aspect in the area of human performance, work control component, in that the work planning did not appropriately plan work activities by incorporating risk insights and job site conditions.
Inspection Report# : 2007005 (pdf)


Public Radiation Safety

Significance: SL-IV Nov 02, 2007
Identified By: NRC
Item Type: NCV NonCited Violation
Failure to Periodically update the Updated Final Safety Analysis Report
SLIV. The team identified a Severity Level IV noncited violation of 10 CFR 50.71(e) for the failure of the licensee to periodically update the Updated Final Safety Analysis Report with all changes made in the facility or procedures. Specifically, in 2002, radiation protection and operations personnel changed the operation of the total dissolved solids holdup tanks from that described in the Updated Final Safety Analysis Report and did not submit an update to the NRC. This issue was entered into the licensee’s corrective action program as Palo Verde Action Request 3075089.

This issue is being treated as traditional enforcement because the failure to update the Final Safety Analysis Report has the potential to impact the NRC’s ability to perform its regulatory function. The finding is characterized as a Severity Level IV violation because the erroneous information was not used to make an unacceptable change to the facility or procedures. The finding is of very low safety significance because the change in operation of the total dissolved solids holdup tanks did not result in an increase in the likelihood of a release of radioactive material. The cause of this finding has a crosscutting aspect associated with resources in the human performance area in that the licensee failed to ensure that personnel and equipment were available and adequate to maintain radiological safety by minimization of long-standing equipment issues (H.2.(a)).

Inspection Report# : 2007012 (pdf)


Physical Protection

Although the NRC is actively overseeing the Security cornerstone, the Commission has decided that certain findings pertaining to security cornerstone will not be publicly available to ensure that potentially useful information is not provided to a possible adversary. Therefore, the cover letters to security inspection reports may be viewed.


Miscellaneous

Last modified : November 26, 2008