A.Introduction
1.Title:ProtectionSystemand RemedialAction SchemeMisoperation
2.Number:PRC-004-WECC-1
3.Purpose:RegionalReliabilityStandard toensureall transmission and generationProtectionSystemand RemedialActionScheme(RAS)Misoperations onTransmissionPathsand RAS defined insection4 are analyzedand/ormitigated.
4.Applicability
4.1.TransmissionOwnersofselectedWECCmajor transmissionpathfacilitiesandRAS listedintablestitled“Major WECCTransferPathsinthe BulkElectricSystem”provided at “MajorWECCRemedialActionSchemes(RAS)”providedat
4.2.GeneratorOwnersthatownRASlistedintheTabletitled“MajorWECCRemedialActionSchemes(RAS)”providedat
4.3.TransmissionOperatorsthatoperatemajortransmissionpathfacilitiesandRASlistedinTablestitled“MajorWECCTransferPaths intheBulkElectricSystem”provided at and “Major WECCRemedialActionSchemes(RAS)”providedat
5.EffectiveDate:Onthe firstdayofthesecondquarterfollowingapplicableregulatoryapproval.
B.Requirements
Therequirementsbelow onlyapplyto the majortransmissionpathsfacilitiesandRAS listedinthetablestitled“Major WECCTransferPathsinthe BulkElectricSystem” and“MajorWECCRemedialActionSchemes(RAS).”
R.1.SystemOperatorsandSystemProtectionpersonnelof theTransmissionOwnersandGeneratorOwnersshall analyze allProtectionSystemand RAS operations.[ViolationRiskFactor:Lower][TimeHorizon:OperationsAssessment]
R1.1.SystemOperatorsshallreview alltrippingoftransmissionelements and RASoperationstoidentifyapparentMisoperationswithin 24 hours.
R1.2.SystemProtectionpersonnelshallanalyze alloperations ofProtection SystemsandRAS within20 businessdays forcorrectnesstocharacterizewhethera Misoperationhas occurredthatmaynothave been identifiedbySystemOperators.
Protection System and RAS Misoperation identification, mitigation, and reporting are of primary concern in the operations horizon, rather than the Planning horizon.
NERC PRC-004 (within 120 days) and PRC-016 (per WECC criteria) require analysis of PS and RAS operations to identify misoperations of all BES facilities, not just “Major WECC” Paths and RAS. Multiple IRO, EOP, and TOP standards [list them and quote] require real time monitoring of status of RAS and other system elements, studies ranging from Real Time Contingency Analysis (30 minutes), day ahead, etc that are intended (in part) to identify any reliability impacts for PS or RAS failures. The TOPs and RCs have the authority to direct and implement changes in operations in order to ensure reliable system operation. Actions ma y include, but are not limited to system reconfiguration, generation dispatch, scheduling facility outages, load shedding, any of which may have economic impact. These standards, at their present strength, were not in place during the initial development of PRC-004-WECC-1.
TOPs required to model RAS to develop path ratings (MOD-029-2a, R1.1.8, R2.2 and MOD-030-3, R2.1.2.1)
PER-006-1 requires training for operations personnel on impacts of PS and RAS (R1).
PRC-004-4(i) and 5(i). RAS and SPS misoperation identification and correction specifically excluded.
Related Background information includes
The Western Electric Coordinating Council (WECC) Regional Reliability Standard PRC-
004-WECC-1 – Protection System and Remedial Action Scheme Misoperation relates to
the reporting of Misoperations of Protection Systems and RAS for a limited set of WECC
Paths. The WECC region plans to conduct work to harmonize the regional standard with
this continent-wide proposed standard and the second phase of this project concerning
SPS and RAS.
This WECC-0126 drafting team effort is this harmonization effort.
PRC-016-1 R1 requires RAS misoperation reporting to the RRO (WECC) per requirements of PRC-012-1. R2 requires corrective action to avoid future misoperations.
PRC-012-2. R5 requires identification of incorrect RAS operations and reporting to the RC. R6 and R7 require CAPs and their completion. Still awaiting FERC approval, then 3-year implementation period. (Coincidentally PRC-012-1 will be withdrawn and PRC-016-1 will be retired.).
R.2.TransmissionOwnersandGeneratorOwnersshallperformthe followingactionsforeachMisoperationofthe ProtectionSystemorRAS. Itis notintendedthatRequirementsR2.1throughR2.4applyto ProtectionSystemand/orRAS actionsthatappearto beentirelyreasonableandcorrect at thetime ofoccurrenceand associatedsystemperformanceisfullycompliantwithNERC ReliabilityStandards.IftheTransmissionOwnerorGeneratorOwnerlaterfindsthe ProtectionSystemorRASoperationtobeincorrectthroughSystemProtectionpersonnel analysis,therequirements ofR2.1throughR2.4becomeapplicableatthetimethe
Adopted byBoard ofTrustees:October29,20081
TransmissionOwnerorGenerator Owner identifies theMisoperation:
R2.1.Ifthe ProtectionSystemorRAS has a Security-BasedMisoperationand twoormoreFunctionallyEquivalentProtectionSystems(FEPS)orFunctionallyEquivalentRAS(FERAS)remainin serviceto ensure BulkElectricSystem(BES)reliability,theTransmissionOwnersorGeneratorOwnersshallremove fromservice the ProtectionSystemorRAS thatmisoperatedwithin22 hoursfollowingidentificationoftheMisoperation.RepairorreplacementofthefailedProtectionSystemorRAS isattheTransmissionOwners’ andGeneratorOwners’discretion.[Violation RiskFactor:High][TimeHorizon:Same-day Operations]
R2.2.Ifthe ProtectionSystemorRAS has a Security-BasedMisoperationand onlyoneFEPS orFERAS remainsinservice toensureBESreliability, theTransmissionOwnerorGeneratorOwner shallperformthe following. [ViolationRiskFactor:High][TimeHorizon:Same-day Operations]
R2.2.1. Followingidentificationof the ProtectionSystemorRAS Misoperation,TransmissionOwnersandGenerator Ownersshallremove fromservicewithin 22 hours forrepairormodificationtheProtectionSystemorRASthatmisoperated.
R2.2.2. TheTransmissionOwnerorGeneratorOwnershallrepairorreplace anyProtectionSystemorRAS thatmisoperatedwitha FEPSorFERAS within20businessdays ofthedateofremoval. TheTransmissionOwnerorGeneratorOwner shallremove the Elementfromservice ordisabletheRAS ifrepairorreplacementisnotcompletedwithin20businessdays.
R2.3.Ifthe ProtectionSystemorRAS has a Security-BasedorDependability-BasedMisoperationand a FEPSandFERAS is notinserviceto ensureBES reliability,TransmissionOwnersorGeneratorOwnersshallrepairand placebackin servicewithin 22 hours theProtectionSystemorRAS thatmisoperated.Ifthiscannotbedone,thenTransmissionOwnersandGeneratorOwnersshallperformthe following.[ViolationRiskFactor:High][TimeHorizon:Same-dayOperations]
R2.3.1. Whena FEPSis notavailable,theTransmissionOwners shallremove theassociatedElementfromservice.
R2.3.2. When FERASis notavailable,then
2.3.2.1.TheGeneratorOwnersshalladjustgenerationtoareliableoperatinglevel,or
2.3.2.2.TransmissionOperatorsshalladjusttheSOLandoperatethefacilitieswithinestablishedlimits.
R2.4.Ifthe ProtectionSystemorRAS has a Dependability-BasedMisoperationbuthasone ormoreFEPS orFERASthatoperatedcorrectly,the associatedElementortransmissionpathmayremainin servicewithout removingfromservice theProtectionSystemorRAS thatfailed,provided one of thefollowingis performed.
R2.4.1. TransmissionOwnersorGeneratorOwnersshallrepairorreplace anyProtectionSystemorRAS thatmisoperatedwithFEPSand FERASwithin20businessdays ofthedateoftheMisoperationidentification,or
R2.4.2. TransmissionOwnersorGeneratorOwnersshallremovefromservicetheassociatedElement or RAS. [ViolationRiskFactor:Lower][TimeHorizon:Operations Assessment]
The intent of R2 is to allow continued operation of an Element or RAS following a misoperation as long as adequate protective or RAS functions remain available on the system related to that Element. The multiple requirements actually identify different misoperation scenarios with a “cook book” approach to provide acceptable mitigation. These mitigation methods are now widely applied at all levels of the BES when the TOP considers them to be applicable, e.g. TPL-001-4, Table 1, event P5 addresses System performance in the absence of redundant protection. However these specific R2 mitigations may not cover all operating scenarios and may force Element outages that would occasionally have an adverse impact worse than leaving the Element in service.
R.3.TransmissionOwnersandGenerationOwnersshallsubmitMisoperationincidentreportsto
Adopted byBoard ofTrustees:October29,20082
WECCStandardPRC-004-WECC-1—ProtectionSystemandRemedial ActionSchemeMisoperation
WECC within 10businessdays forthe following.[ViolationRiskFactor:Lower][TimeHorizon:Operations Assessment]
R3.1.IdentificationofaMisoperationofa ProtectionSystemand/orRAS,
R3.2.Completionofrepairsor thereplacementofProtectionSystemand/orRASthatmisoperated.
WECC presently, and for an unknown period, has not used these “10-day” reports. The reporting requirement itself is covered under Section 1600 request for quarterly reports of Protection System misoperations and for RAS under PRC-016, R1. This requirement can safely be retired without negative impact to system reliability.
C.Measures
Eachmeasurebelowappliesdirectlytotherequirementbynumber.
M1.TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyreported andanalyzed allProtectionSystemandRASoperations.
M1.1TransmissionOwnersandGenerationOwnersshallhaveevidencethatSystemOperatingpersonnelreviewedalloperationsofProtectionSystemand RASwithin 24 hours.
M1.2TransmissionOwnersandGenerationOwnersshallhaveevidencethatSystemProtectionpersonnelanalyzedalloperationsofProtectionSystemandRASforcorrectnesswithin20 businessdays.
M2.TransmissionOwnersandGenerationOwnersshallhaveevidenceforthe following.
M2.1TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyremoved the ProtectionSystemorRAS thatmisoperated fromservice within22hoursfollowingidentification ofthe ProtectionSystemorRAS Misoperation.
M2.2TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyremoved fromservice andrepairedtheProtectionSystemorRAS thatmisoperatedpermeasurements M2.2.1throughM2.2.2.
M2.2.1TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyremoved the ProtectionSystemorRAS thatmisoperatedfromservicewithin22hoursfollowingidentificationoftheProtectionSystemorRAS Misoperation.
M2.2.2TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyrepairedorreplacedtheProtectionSystemorRAS thatmisoperatedwithin 20 businessdays oreither removed the ElementfromserviceordisabledtheRAS.
M2.3TheTransmissionOwnersand GenerationOwnersshallhaveevidencethattheyrepairedthe ProtectionSystemorRAS thatmisoperatedwithin 22hoursfollowingidentificationof theProtectionSystemorRASMisoperation.
M2.3.1TheTransmissionOwner shallhaveevidencethatitremovedtheassociatedElement fromservice.
M2.3.2TheGeneratorOwners andTransmissionOperatorsshallhavedocumentationdescribingallactionstakenthatadjustedgenerationorSOLs and operatedfacilitieswithinestablishedlimits.
M2.4TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyrepaired orreplacedtheProtectionSystemorRAS thatmisoperatedincludingdocumentationthatdescribestheactionstaken.
M2.4.1TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyrepairedorreplacedtheProtectionSystemorRAS thatmisoperated
within 20 businessdays ofthemisoperationidentification.
Adopted byBoard ofTrustees:October29,20083
M2.4.2TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyremovedtheassociatedElement or RASfromservice.
M3.TransmissionOwnersandGenerationOwnersshallhaveevidencethattheyreportedthefollowingwithin10 businessdays.
M3.1IdentificationofallProtectionSystemandRASMisoperationsandcorrectiveactionstakenorplanned.
M3.2Completionof repairorreplacementofProtectionSystemand/or RASthatmisoperated.
D.Compliance
1.ComplianceMonitoringProcess
1.1ComplianceMonitoringResponsibility
ComplianceEnforcementAuthority
1.2ComplianceMonitoringPeriod
ComplianceEnforcementAuthoritymayuse one ormore ofthefollowingmethods toassesscompliance:
-MisoperationReports
-Reportssubmittedquarterly
-Spotcheckauditsconductedanytime with 30daysnoticegiven to prepare
-Periodicauditas scheduled bythe ComplianceEnforcementAuthority
-Investigations
-Othermethods as provided forinthe Compliance MonitoringEnforcementProgram
1.2.1The Performance-resetPeriod isone calendarmonth.
1.3DataRetention
ReliabilityCoordinators,TransmissionOwners,and GenerationOwnersshallkeepevidencefor Measures M1and M2forfivecalendaryearsplusyeartodate.
1.4.AdditionalComplianceInformation
None.
2.Violation SeverityLevels
R1
Lower / Moderate / High / SevereSystemOperatingpersonneloftheTransmissionOwnerorGeneratorOwnerdidnotreviewtheProtectionSystemOperationorRASoperationwithin24hoursbutdidreviewtheProtectionSystemOperationorRASoperationwithinsixbusinessdays. / SystemOperatingpersonneloftheTransmissionOwnerorGeneratorOwnerdidnotreviewtheProtectionSystemoperationorRASoperationwithinsixbusinessdays. / SystemProtectionpersonneloftheTransmissionOwnerandGeneratorOwnerdidnotanalyzetheProtectionSystemoperationorRASoperationwithin20businessdaysbutdidanalyzetheProtectionSystemoperationorRASoperationwithin25businessdays. / SystemProtectionpersonneloftheTransmissionOwnerorGeneratorOwnerdidnotanalyzetheProtectionSystemoperationorRASoperationwithin25businessdays.
R2.1and R2.2.1
Lower / Moderate / High / SevereTheTransmissionOwnerandGeneratorOwnerdidnotremovefromservice,repair,orimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequiredwithin22hoursbutdidperformtherequirementswithin24hours. / TheTransmissionOwnerandGeneratorOwnerdidnotremovefromservice,repair, orimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequiredinlessthan24hoursbutdidperformtherequirementswithin28hours. / TheTransmissionOwnerandGeneratorOwnerdidnotperformtheremovalfromservice,repair,orimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequiredinlessthan28hoursbutdidperformtherequirementswithin32hours. / TheTransmissionOwnerandGeneratorOwnerdidnotperformtheremovalfromservice,repair,orimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequired within32hours.
R2.3
Lower / Moderate / High / SevereTheTransmissionOperatorandGeneratorOwnerdidnotadjustgenerationtoareliableoperatinglevel,adjusttheSOLand operatethefacilitieswithinestablishedlimitsorimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequiredwithin22hoursbutdidperformtherequirementswithin24hours. / TheTransmissionOperatorandGeneratorOwnerdidnotadjustgenerationtoareliableoperatinglevel,adjusttheSOLandoperatethefacilitieswithinestablishedlimitsorimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequiredinlessthan24hoursbutdidperformtherequirementswithin28hours. / TheTransmissionOperatorandGeneratorOwnerdidnotadjustgenerationtoareliableoperatinglevel,adjusttheSOLand operatethefacilitieswithinestablishedlimitsorimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequiredinlessthan28hoursbutdidperformtherequirementswithin32hours. / TheTransmissionOperatorandGeneratorOwnerdidnotadjustgenerationtoareliableoperatinglevel,adjusttheSOLandoperatethefacilitieswithinestablishedlimitsorimplementothercompliancemeasuresfortheProtectionSystemorRASthatmisoperatedasrequired within32hours.
R2.2.2and R2.4
Lower / Moderate / High / SevereTheTransmissionOwnerandGeneratorOwnerdidnotperformtherequiredrepairs,replacement,orsystemoperationadjustmentstocomplywiththerequirementswithin20businessdaysbutdidperformtherequiredactivitieswithin25businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotperformtherequiredrepairs,replacement,orsystemoperationadjustmenttocomplywiththerequirementswithin25businessdaysbutdidperformtherequiredactivitieswithin28businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotperformtherequiredrepairs,replacement,orsystemoperationadjustmentto complywiththerequirementswithin28businessdaysbutdidperformtherequiredactivitieswithin30businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotperformtherequiredrepairs,replacement,orsystemoperationadjustmentstocomplywiththerequirementswithin30businessdays.
R3.1
Lower / Moderate / High / SevereTheTransmissionOwnerandGeneratorOwnerdidnotreporttheMisoperationandcorrectiveactionstakenorplannedtocomplywiththerequirementswithin10businessdaysbutdidperformtherequiredactivitieswithin15businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotreporttheMisoperationandcorrectiveactionstakenorplannedtocomplywiththerequirementswithin15businessdaysbutdidperformtherequiredactivitieswithin20businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotreporttheMisoperationandcorrectiveactionstakenorplannedtocomplywiththerequirementswithin20businessdaysbutdidperformtherequiredactivitieswithin25businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotreporttheMisoperationandcorrectiveactionstakenorplannedtocomplywiththerequirementswithin25businessdays.
R3.2
Lower / Moderate / High / SevereTheTransmissionOwnerandGeneratorOwnerdidnotreportthecompletionofrepairorreplacementofProtectionSystemand/orRASthatmisoperatedtocomplywiththerequirementswithin10businessdaysofthecompletionbutdidperformtherequiredactivitieswithin15businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotreportthecompletionofrepairorreplacementofProtectionSystemand/orRASthatmisoperatedtocomplywiththerequirementswithin15businessdaysofthecompletionbutdidperformtherequiredactivitieswithin20businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotreportthecompletionofrepairorreplacementofProtectionSystemand/orRASthatmisoperatedtocomplywiththerequirementswithin20businessdaysofthecompletionbutdidperformtherequiredactivitieswithin25businessdays. / TheTransmissionOwnerandGeneratorOwnerdidnotreportthecompletionofrepairorreplacement ofProtectionSystemand/orRASthatmisoperatedtocomplywiththerequirementswithin25 businessdaysofthecompletion.
VersionHistory—ShowsApprovalHistoryandSummaryofChanges intheActionField
Version / Date / Action / ChangeTracking1 / April16, 2008 / PermanentReplacementStandardfor
PRC-STD-001-1 and PRC-STD-003-1
1 / April21, 2011 / FERC OrderissuedapprovingPRC-004-WECC-1(approvaleffective June27,2011)