Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “risk”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

Surrogate Modeling For Efficiently Accurately and Conservatively Estimating Measures of Risk

We present a surrogate modeling framework for conservatively estimating measures of risk from limited realizations of an expensive physical experiment or computational simulation. We adopt a probabilistic description of risk that assigns probabilities to consequences associated with an event and use risk measures, which combine objective evidence with the subjective values of decision makers, to quantify anticipated outcomes. Given a set of samples, we construct a surrogate model that produces estimates of risk measures that are always greater than their empirical estimates obtained from the training data. These surrogate models not only limit over-confidence in reliability and safety assessments, but produce estimates of risk measures that converge much faster to the true value than purely sample-based estimates. We first detail the construction of conservative surrogate models that can be tailored to the specific risk preferences of the stakeholder and then present an approach, based upon stochastic orders, for constructing surrogate models that are conservative with respect to families of risk measures. The surrogate models introduce a bias that allows them to conservatively estimate the target risk measures. We provide theoretical results that show that this bias decays at the same rate as the L 2 error in the surrogate model. Our numerical examples confirm that risk-aware surrogate models do indeed over-estimate the target risk measures while converging at the expected rate.

97 MATHEMATICS AND COMPUTING↗

Hazard and risk analysis framework for nuclear power plant–based integrated energy systems

Employing integrated energy systems (IESs) with nuclear power plants (NPPs) can improve NPP utilization by leveraging dedicated thermal and electric power delivery, but it may also increase operational safety risks. This paper presents a framework to identify and quantify hazards and risks for such IESs. The framework combines accidentology to review past industrial accidents with failure modes and effects analysis (FMEA) to identify potential future incidents. Hydrogen explosion and toxic chemical release hazards are of particular concern. Explosion consequences are quantified using the Bauwens-Dorofeev (Bauwens) and trinitrotoluene equivalent mass (TNT-EM) methods, while chemical release consequences are computed using the Gaussian atmospheric dispersion method. Operational disturbances from direct electrical and thermal integration that may affect NPP safety are modeled using probabilistic risk analysis (PRA). Hazards and risks are then evaluated for regulatory compliance. The framework is applied to IESs comprising pressurized or boiling water reactors supplying three levels of thermal and electrical power to industrial customers. Case studies include high-temperature steam electrolysis hydrogen plants of varying capacities and a synthetic fuel production plant. Sensitivity analysis examines piping component failures in the PRA model as a precursor to cost estimation for thermal extraction line design. Additionally, Fussel-Vessely (FV) and risk increase importance (RII) measures identify risk-informed design improvements for the thermal extraction system. FMEA highlights hazards such as loss of offsite power, prompt loss of electrical load, loss of thermal output, and immediate steam diversion, in addition to hydrogen explosions and toxic chemical releases. Both Bauwens and TNT-EM methods suggest maintaining several hundred meters of separation between the NPP and hydrogen facility to mitigate explosion risks. PRA results show a maximum initiating event frequency increase of 1.15% and an overall risk increase of 0.28%. Importance measure analysis identifies upstream pipe leak isolation components as critical. Evaluating the results against safety regulations, it is concluded that hazards and risks can be managed to comply with regulations through risk-informed thermal and electrical connection designs, component selection, maintenance programs, and safe separation distances between NPPs and integrated industrial facilities.

08 - HYDROGEN↗

An Integrated Framework for Risk Assessment of High Safety Significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology and Demonstration

This report documents the activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2022 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective and secure DI&C technologies for digital upgrades/designs. A framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the risk impact of plant modernization, considering the introduction of high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals, the framework provides a means to address relevant technical issues by: (1) defining a risk-informed analysis process for DI&C upgrade, that integrates hazard analysis, reliability analysis, and consequence analysis, (2) applying risk-informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development and deployment of advanced DI&C technologies on nuclear power plant (NPPs).

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Power System Wildfire Risks and Potential Solutions: A Literature Review & Proposed Metric

Several fire risk evaluation, fire tracking, and fire response resources are available. The risk metrics and fire response programs are sometimes modified to include a power system context. The risk metrics often evaluate the risk of fires causing power system faults or outages, especially on transmission systems. The response programs are modified to ensure the safety of power system equipment and first responders as well as to coordinate power system outages to both ensure safety during an active fire and prevent fire ignition during high risk periods. Although some aspects of wildfire responses have been adapted to include power system concerns, adaptations to power system operations and maintenance to include wildfire risks and responses are still nascent. In particular, a risk metric that evaluates the potential for power system components to ignite wildfires is needed to help guide power system upgrade efforts and power system fire safety measures. This document serves as a brief literature review of wildfire risk metrics and response programs and how they relate to power systems. It also includes a proposed risk metric and structure for describing the risk of a power system component igniting a fire.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Survey of Cyber Risk Analysis Techniques for Use in the Nuclear Industry

Using traditional probabilistic risk analysis methods for severe accident safety risk management on non-digital systems, structures, and components at nuclear power plants is well-established. In contrast, cyber risk analysis of digital assets is still an immature field with unproven techniques due, in part, to the continuously changing threat environment and the challenge of digital assets failing in unexpected ways. As the nuclear fleet continues to adopt digital instrumentation and control systems, it is increasingly important to have effective and efficient cyber risk analysis techniques to support risk management decisions, such as risk elimination by system redesign or risk mitigation by implementation of prioritized security controls. To understand the state of the art in cyber risk analysis for future research, we surveyed 36 publications across ten application domains. We describe our survey methodology and rate each technique based upon scope, adoptability, and repeatability. In this work, we examine the unique constraints of the nuclear industry and outline the strengths and weaknesses of using the cyber risk analysis techniques in the industry, highlighting gaps with current techniques. We also discuss challenges and potential research directions for advancing the science for both existing and new advanced reactors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Quantifying Medical Risk on a Long Duration Lunar Mission: A Demonstration of NASA’s IMPACT Tradespace Analysis Tool

Background NASA’s human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in-mission medical care. The distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and constraints on the medical evacuation of astronauts. Mass, volume, power, and data will be limited while higher demands will be placed on the crew to manage medical care. NASA’s Moon to Mars exploration strategy lays out increasingly complex Artemis missions both in terms of duration and operations. In these more challenging deep space missions, it is important to quantitatively estimate the human medical risk to inform a traditional heuristic approach to medical risk. Prior tools have been developed for missions in low Earth orbit, but a new tool is required to plan for future exploration missions. Methods IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a risk assessment tool developed by NASA to advance exploration mission medical system design by quantitatively estimating mission medical risk. IMPACT v1.0 includes a novel evidence library baselined to exploration environments; an expanded list of 119 medical conditions; the addition of medical resources; and the ability for rapid and iterative analysis. Medical system risk estimates include loss of crew life, consideration of the need for return to definitive care (medical evacuation), and an estimate of crew time affected due to medical conditions. A notional long duration lunar orbit and lunar surface design reference mission (DRM) was chosen with a 4-astronaut crew to represent a sustained exploration Artemis mission. Results/Discussion Overall, IMPACT successfully quantified medical risk and derived an optimized medical system to support crew on a long duration lunar mission. In this DRM, the calculated loss of crew life from a medical event was 0.008 events per mission, risk of potential need for evacuation was 0.30 events per mission, and cumulative crew time affected by medical conditions was 103 days. The medical conditions that most contributed to overall medical risk were decompression sickness, trauma conditions, and respiratory failure. The conditions that had the largest effects on crew performance included musculoskeletal injuries and lunar dust exposure. The IMPACT-generated medical system included resources that target the most common and highest risk conditions. This systematic analysis demonstrates the value of the IMPACT tool in medical system design for human exploration spaceflight missions.

Missions to Mars↗

Quantifying Medical Risk on a Long Duration Lunar Mission: A Demonstration of NASA’s IMPACT Tradespace Analysis Tool

Background NASA’s human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in-mission medical care. The distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and constraints on the medical evacuation of astronauts. Mass, volume, power, and data will be limited while higher demands will be placed on the crew to manage medical care. NASA’s Moon to Mars exploration strategy lays out increasingly complex Artemis missions both in terms of duration and operations. In these more challenging deep space missions, it is important to quantitatively estimate the human medical risk to inform a traditional heuristic approach to medical risk. Prior tools have been developed for missions in low Earth orbit, but a new tool is required to plan for future exploration missions. Methods IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a risk assessment tool developed by NASA to advance exploration mission medical system design by quantitatively estimating mission medical risk. IMPACT v1.0 includes a novel evidence library baselined to exploration environments; an expanded list of 119 medical conditions; the addition of medical resources; and the ability for rapid and iterative analysis. Medical system risk estimates include loss of crew life, consideration of the need for return to definitive care (medical evacuation), and an estimate of crew time affected due to medical conditions. A notional long duration lunar orbit and lunar surface design reference mission (DRM) was chosen with a 4-astronaut crew to represent a sustained exploration Artemis mission. Results/Discussion Overall, IMPACT successfully quantified medical risk and derived an optimized medical system to support crew on a long duration lunar mission. In this DRM, the calculated loss of crew life from a medical event was 0.008 events per mission, risk of potential need for evacuation was 0.30 events per mission, and cumulative crew time affected by medical conditions was 103 days. The medical conditions that most contributed to overall medical risk were decompression sickness, trauma conditions, and respiratory failure. The conditions that had the largest effects on crew performance included musculoskeletal injuries and lunar dust exposure. The IMPACT-generated medical system included resources that target the most common and highest risk conditions. This systematic analysis demonstrates the value of the IMPACT tool in medical system design for human exploration spaceflight missions.

Missions to Mars↗

Pre-screening to guide coronary artery calcium scoring for early identification of high-risk individuals in the general population

Abstract Aims To evaluate the ability of Systematic COronary Risk Estimation 2 (SCORE2) and other pre-screening methods to identify individuals with high coronary artery calcium score (CACS) in the general population. Methods and results Computed tomography-based CACS quantification was performed in 6530 individuals aged 45 years or older from the general population. Various pre-screening methods to guide referral for CACS were evaluated. Miss rates for high CACS (CACS ≥300 and ≥100) were evaluated for various pre-screening methods: moderate (≥5%) and high (≥10%) SCORE2 risk, any traditional coronary artery disease (CAD) risk factor, any Risk Or Benefit IN Screening for CArdiovascular Disease (ROBINSCA) risk factor, and moderately (>3 mg/24 h) increased urine albumin excretion (UAE). Out of 6530 participants, 643 (9.8%) had CACS ≥300 and 1236 (18.9%) had CACS ≥100. For CACS ≥300 and CACS ≥100, miss rate was 32 and 41% for pre-screening by moderate (≥5%) SCORE2 risk and 81 and 87% for high (≥10%) SCORE2 risk, respectively. For CACS ≥300 and CACS ≥100, miss rate was 8 and 11% for pre-screening by at least one CAD risk factor, 24 and 25% for at least one ROBINSCA risk factor, and 67 and 67% for moderately increased UAE, respectively. Conclusion Many individuals with high CACS in the general population are left unidentified when only performing CACS in case of at least moderate (≥5%) SCORE2, which closely resembles current clinical practice. Less stringent pre-screening by presence of at least one CAD risk factor to guide CACS identifies more individuals with high CACS and could improve CAD prevention.

Ties, Daan (ORCID:0000000164729886)↗

Trust and consequences: Role of community science, perceptions, values, and environmental justice in risk communication

Risk communication is often viewed as imparting information and perhaps as a two-way dialogue. Risk communication inadequacies on the part of both “communicator” and “community members” can lead to adverse consequences and amplify environmental justice disparities. The paper suggests a transformational approach where risk communicators must learn to trust community experts and their knowledge base (and act upon it), where risk information imparted by risk communicators addresses what communities are most concerned about (as well as risk from specific chemicals or radionuclides), and where risk information and assessments address underlying issues and disparities, as well as cultural traditions (among others). Providing risk probabilities is no longer sufficient; western science may not be enough, and community and native scientific knowledge is needed. Risk communication (or information transfer) for environmental risks that are ongoing usually applies to low-income, minority communities—people living in dense inner cities, rural communities, Native American communities—or to people living near a risky facility. Communication within this context requires mutual trust, listening and respect, as well as acceptance of indigenous and community knowledge as equally valuable. Examples are given to illustrate a community perspective.

97 MATHEMATICS AND COMPUTING↗

An Overview of the Risk Assessment Information System

This technical memorandum (TM) presents an overview of the Risk Assessment Information System (RAIS), a collection of web-based tools designed to assist with the environmental risk assessment process. The objective of the RAIS is to be a single resource for the risk assessment process, providing guidance when planning and performing the steps: data assessment, exposure assessment, toxicity assessment, and risk characterization. The RAIS evolved as a result of the initial remediation efforts at various United States (U.S.) Department of Energy (DOE) facilities. The goal was to increase the efficiency and transparency of the human health and ecological assessments being performed by DOE’s Office of Environmental Management, Oak Ridge Operations (ORO) office by providing a repository for toxicity information, physicochemical data, risk assessment procedures, standardized risk calculation methods, and web-based tools. Since the initial launch in 1996, the RAIS has expanded its user base outside of the federal government and now has users from over 100 countries, universities, states, and local governments. What sets the RAIS apart from other risk assessment sites are the publicly available, searchable toxicity and physicochemical databases and the wide range of chemical and radionuclide risk calculation tools. The purpose of this TM is to present the RAIS tools in order of the website menus and explain how they fit in the risk assessment process. In addition, this TM describes differences between the chemical and radionuclide tools of the RAIS. Screening level equations, chronic daily intake equations, and default exposure factors used in the chemical and radionuclide calculators are included in the appendices of this TM. This TM is not intended to be a detailed guide to risk assessment or the RAIS tools. The tools on the RAIS can be used to comply with procedures from multiple agencies, including but not limited to DOE, U.S. Environmental Protection Agency (EPA), U.S. Department of Defense (DoD), and many state governments. Further information on the RAIS tools can be found in the user guides and tutorials available on the webpage.

38 RADIATION CHEMISTRY, RADIOCHEMISTRY, AND NUCLEA↗

Quantitative Risk Assessment for Hydrogen-Powered Locomotive Refueling

Hydrogen powered locomotives are being explored to reduce emissions in rail applications. The risks of operations like refueling should be understood to ensure safe environments for workers and members of the public. Sensitivity analyses were conducted using HyRAM+ to identify major drivers of risk and compare effects of system parameters on individual risk. The consequences of jet fires from full-bore leaks dominated the risk, compared to explosions or smaller leaks. Pipe size, leak detection capability, and leak frequencies of system components greatly affected risk while overpressure modeling parameters and ambient conditions had little effect. The effects of personal protective equipment (PPE) materials on individual risk were quantified by reducing the individual’s exposure time or absorbed thermal dose. PPE only showed a risk reduction in low-risk cases. This study highlighted target areas for risk mitigation, including leak detection equipment and component maintenance, and indicated that the minimal effects of other parameters on risk may not justify prescriptive requirements for refueling operators.

08 HYDROGEN↗

Tactical Analysis for Calculating Contextual Risk at Boundaries: Summary of Laboratory Directed Research & Development Effort

The Tactical Analysis for Calculating Contextual Risk at Boundaries (TACCRAB) tool is an innovative digital twin (DT) platform and automated risk algorithm designed to transform operational decision-making in structured screening environments, with an initial focus on Southern Border Land Ports of Entry (POEs). The invention provides integration points for advanced artificial intelligence, predictive modeling, and real-time data analysis to produce a comprehensive risk management tool that enables proactive, data-informed security strategies. The core inventive features of TACCRAB center on its unique risk algorithm, which dynamically calculates contextual risk by synthesizing historical data, near real-time streaming data from the checkpoints themselves, and AI-generated predictions. Unlike traditional risk assessment methods, TACCRAB utilizes a DT to provide comprehensive operational insights, allowing stakeholders to visualize, simulate, and optimize checkpoint configurations with unprecedented speed and contextual awareness. TACCRAB's key innovation lies in its ability to combine multiple complex inputs - including technology detection probabilities, resource availability, screening pathway characteristics, and threat actor behavioral patterns - into a unified risk calculation and update these inputs based on changing operational and environmental conditions. By leveraging a DT that continuously updates and learns from linked data, TACCRAB can suggest adaptive mitigation strategies that minimize risk while maintaining operational efficiency. Particularly novel is the platform's approach to decision support, which goes beyond static risk assessment. The DT provides dynamic metrics such as wait times, resource allocation effectiveness, and potential emerging threat scenarios, enabling users to view sophisticated, relevant what-if simulations and optimize checkpoint operations in near real-time. The system's architecture allows for generalized application across different screening environments, such as secure facilities, ports of entry, and soft targets, making it a versatile tool for security and operational management. The invention distinguishes itself through its comprehensive integration of predictive modeling, AI-driven pattern discovery, and user-friendly interface design. By combining these elements, TACCRAB transforms complex risk data into actionable insights, supporting decision-makers at various organizational levels - from booth agents making split-second screening decisions to checkpoint managers optimizing the day's resource allocation to strategic planners managing long-term investments.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

The association between neighborhood obesogenic factors and prostate cancer risk and mortality: the Southern Community Cohort Study

Background: Prostate cancer is one of the leading causes of cancer-related mortality among men in the United States. We examined the role of neighborhood obesogenic attributes on prostate cancer risk and mortality in the Southern Community Cohort Study (SCCS). Methods: From the total of 34,166 SCCS male participants, 28,356 were included in the analysis. We assessed the relationship between neighborhood obesogenic factors [neighborhood socioeconomic status (nSES) and neighborhood obesogenic environment indices including the restaurant environment index, the retail food environment index, parks, recreational facilities, and businesses] and prostate cancer risk and mortality by controlling for individual-level factors using a multivariable Cox proportional hazards model. We further stratified prostate cancer risk analysis by race and body mass index (BMI). Results: Median follow-up time was 133 months [interquartile range (IQR): 103, 152], and the mean age was 51.62 (SD: ± 8.42) years. There were 1,524 (5.37%) prostate cancer diagnoses and 98 (6.43%) prostate cancer deaths during follow-up. Compared to participants residing in the wealthiest quintile, those residing in the poorest quintile had a higher risk of prostate cancer (aHR = 1.32, 95% CI 1.12–1.57, p = 0.001), particularly among non-obese men with a BMI < 30 (aHR = 1.46, 95% CI 1.07–1.98, p = 0.016). The restaurant environment index was associated with a higher prostate cancer risk in overweight (BMI ≥ 25) White men (aHR = 3.37, 95% CI 1.04–10.94, p = 0.043, quintile 1 vs. None). Obese Black individuals without any neighborhood recreational facilities had a 42% higher risk (aHR = 1.42, 95% CI 1.04–1.94, p = 0.026) compared to those with any access. Compared to residents in the wealthiest quintile and most walkable area, those residing within the poorest quintile (aHR = 3.43, 95% CI 1.54–7.64, p = 0.003) or the least walkable area (aHR = 3.45, 95% CI 1.22–9.78, p = 0.020) had a higher risk of prostate cancer death. Conclusion: Living in a lower-nSES area was associated with a higher prostate cancer risk, particularly among Black men. Restaurant and retail food environment indices were also associated with a higher prostate cancer risk, with stronger associations within overweight White individuals. Finally, residing in a low-SES neighborhood or the least walkable areas were associated with a higher risk of prostate cancer mortality.

60 APPLIED LIFE SCIENCES↗

Toxicological Risks During Human Space Exploration

The goal of toxicological risk assessment of human space flight is to identify and quantify significant risks to astronaut health from air pollution inside the vehicle or habitat, and to develop a strategy for control of those risks. The approach to completing a toxicological risk assessment involves data and experience on the frequency and severity of toxicological incidents that have occurred during space flight. Control of these incidents depends on being able to understand their cause from in-flight and ground-based analysis of air samples, crew reports of air quality, and known failures in containment of toxic chemicals. Toxicological risk assessment in exploration missions must be based on an evaluation of the unique toxic hazards presented by the habitat location. For example, lunar and Martian dust must be toxicologically evaluated to determine the appropriate control measures for exploration missions. Experience with near-earth flights has shown that the toxic products from fires present the highest risk to crew health from air pollution. Systems and payload leaks also present a significant hazard. The health risk from toxicity associated with materials offgassing or accumulation of human metabolites is generally well controlled. Early tests of lunar and Martian dust simulants have shown that each posses the potential to cause fibrosis in the lung in a murine model. Toxicological risks from air pollutants in space habitats originate from many sources. A number of risks have been identified through near-earth operations; however, the evaluation of additional new risks present during exploration missions will be a challenge.

James, John T.↗

Towards Risk Based Design for NASA's Missions

This paper describes the concept of Risk Based Design in the context of NASA s low volume, high cost missions. The concept of accounting for risk in the design lifecycle has been discussed and proposed under several research topics, including reliability, risk analysis, optimization, uncertainty, decision-based design, and robust design. This work aims to identify and develop methods to enable and automate a means to characterize and optimize risk, and use risk as a tradeable resource to make robust and reliable decisions, in the context of the uncertain and ambiguous stage of early conceptual design. This paper first presents a survey of the related topics explored in the design research community as they relate to risk based design. Then, a summary of the topics from the NASA-led Risk Colloquium is presented, followed by current efforts within NASA to account for risk in early design. Finally, a list of "risk elements", identified for early-phase conceptual design at NASA, is presented. The purpose is to lay the foundation and develop a roadmap for future work and collaborations for research to eliminate and mitigate these risk elements in early phase design.

Tumer, Irem Y.↗

Improving Our Odds: Success through Continuous Risk Management

Launching a rocket, running a business, driving to work and even day-to-day living all involve some degree of risk. Risk is ever present yet not always recognized, adequately assessed and appropriately mitigated. Identification, assessment and mitigation of risk are elements of the risk management component of the "continuous improvement" way of life that has become a hallmark of successful and progressive enterprises. While the application of risk management techniques to provide continuous improvement may be detailed and extensive, the philosophy, ideals and tools can be beneficially applied to all situations. Experiences with the use of risk identification, assessment and mitigation techniques for complex systems and processes are described. System safety efforts and tools used to examine potential risks of the Ares I First Stage of NASA s new Constellation Crew Launch Vehicle (CLV) presently being designed are noted as examples. Recommendations from lessons learned are provided for the application of risk management during the development of new systems as well as for the improvement of existing systems. Lessons learned and suggestions given are also examined for applicability to simple systems, uncomplicated processes and routine personal daily tasks. This paper informs the reader of varied uses of risk management efforts and techniques to identify, assess and mitigate risk for improvement of products, success of business, protection of people and enhancement of personal life.

Greenhalgh, Phillip O.↗

Intertwining Risk Insights and Design Decisions

The state of systems engineering is such that a form of early and continued use of risk assessments is conducted (as evidenced by NASA's adoption and use of the 'Continuous Risk Management' paradigm developed by SEI). ... However, these practices fall short of theideal: (1) Integration between risk assessment techniques and other systems engineering tools is weak. (2) Risk assessment techniques and the insights they yield are only informally coupled to design decisions. (3) Individual riskassessment techniques lack the mix of breadth, fidelity and agility required to span the gamut of the design space. In this paper we present an approach that addresses these shortcomings. The hallmark of our approach is a simple representation comprising objectives (what the system is to do), risks (whose occurrence would detract from attainment of objectives) and activities (a.k.a. 'mitigations') that, if performed, will decrease those risks. These are linked to indicate by how much a risk would detract from attainment of an objective, and by how much an activity would reduce a risk. The simplicity of our representational framework gives it the breadth to encompass the gamut of the design space concerns, the agility to be utilized in even the earliest phases of designs, and the capability to connect to system engineering models and higher-fidelity risk tools. It is through this integration that we address the shortcomings listed above, and so achieve the intertwining between risk insights and design decisions needed to guide systems engineering towards superior final designs while avoiding costly rework to achieve them. The paper will use an example, constructed to be representative of space mission design, to illustrate our approach.

systems engineering↗

Public Risk Assessment Program

The Public Entry Risk Assessment (PERA) program addresses risk to the public from shuttle or other spacecraft re-entry trajectories. Managing public risk to acceptable levels is a major component of safe spacecraft operation. PERA is given scenario inputs of vehicle trajectory, probability of failure along that trajectory, the resulting debris characteristics, and field size and distribution, and returns risk metrics that quantify the individual and collective risk posed by that scenario. Due to the large volume of data required to perform such a risk analysis, PERA was designed to streamline the analysis process by using innovative mathematical analysis of the risk assessment equations. Real-time analysis in the event of a shuttle contingency operation, such as damage to the Orbiter, is possible because PERA allows for a change to the probability of failure models, therefore providing a much quicker estimation of public risk. PERA also provides the ability to generate movie files showing how the entry risk changes as the entry develops. PERA was designed to streamline the computation of the enormous amounts of data needed for this type of risk assessment by using an average distribution of debris on the ground, rather than pinpointing the impact point of every piece of debris. This has reduced the amount of computational time significantly without reducing the accuracy of the results. PERA was written in MATLAB; a compiled version can run from a DOS or UNIX prompt.

Mendeck, Gavin↗