Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “risk objectives”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25

Early Information Parameter-Set Analysis for Satellite Close Approaches using Machine Learning

Understanding orbital mechanics is essential in space flight and navigation applications, and leveraging modern force models for flight path projection remains an important aspect in space mission design and operation. However, force models do not capture all the dynamics or perturbations in the space environment and thus are subject to errors in predicting the state vectors. The further out the predicted miss distance between spacecraft is from the time of closest approach (TCA), the larger the propagated errors in the predicted miss distance at TCA is. The dependency on these force models for spacecraft flight state prediction calls for a more reliable method that can quantify, or even reduce, these propagated errors. With recent advances in the field artificial intelligence, specifically in machine and deep learning algorithms, a model that implements these approaches can improve on the modern force model approach. The goal for this work is to provide an early-information decision-making threshold, in order to prioritize risk assessment implementation, given the ongoing increase of space objects. In analyzing the relationship of several parameters from conjunction data messages(CDMs) and solar information, early information becomes viable in miss distance prediction with unsupervised learning techniques, which learn the parameters that are linked together with miss distance and probability of collision (Pc) variables. Another approach implemented for identifying relationships within CDMs is supervised learning, in which a shallow neural network binary classifier learns to distinguish events with Pc values¡108. These parameters detected in the unsupervised process are then applied to a regression neural network, which predicts the miss distance at TCA for a specific event within a given uncertainty bound. For the regression neural network, a Long Short Term Memory (LSTM) neural network is implemented, which yields memory about each time step in an event. Using an LSTM network, the model learns to predict miss distance within 0.2km of the value measured at TCA. Although there is a limited amount of "close miss" data to train a network, the network learns to associate parameters, like large energy dissipation rates with the secondary object, with an elevated Pc

Brianna I. Robertson↗

Sea Level Rise and City-Level Climate Action

Background: Climate change is the greatest threat to global health in the 21st century. Rising sea levels are one particularly concerning manifestation of this and many of the world’s largest cities are vulnerable to sea level rise (SLR). Thus, urban climate adaptation and mitigation policies are increasingly important to protect population health. Objectives: This study aimed to determine whether being at risk of SLR was associated with city-level climate action. It also aimed to assess the wider drivers of climate action in cities, in order to guide ongoing efforts to motivate climate action, assess public health preparedness and identify research gaps. Methods: This is an ecological cross-sectional study using secondary data from CDP, the Urban Climate Change Research Network (UCCRN), World Bank, United Nations Cities and EM-DAT (Emergency Events Database). The study population consisted of 517 cities who participated in CDP’s 2019 Cities Survey. Multivariable logistic regression was utilized to assess the relationship between risk of SLR and city-level climate action, and secondly, to assess the wider determinants of city-level climate action. Results: There was evidence of crude associations between risk of SLR and three outcome variables representing city-level climate action. However, after adjusting for confounding variables, these crude associations disappeared. World region, national income status and urban population were shown to be stronger predictors of city-level climate action. Conclusion: It is concerning for population health that there is no association demonstrated between risk of SLR and climate action. This could indicate a lack of awareness of the risks posed by SLR within urban governance. To fulfil their health protection responsibilities, it is essential that public health professionals take a leading role in advocating for climate action.

sea level rise↗

Supporting Hazard Analysis for Wildfire Response Using fmdtools and MIKA

The System Wide Safety (SWS) Safety Demonstrator (SD) Series drives development of an increasingly capable In-Time Aviation Safety Management System (IASMS) focusing on humanitarian applications, starting with wildfire response (SD-1). The goals of this report are to (1) provide an early hazard analysis and mitigation evaluation of wildfire response to support these efforts and (2) provide a demonstration of capabilities of the Fault Model Design Tools (fmdtools) and Manager for Intelligent Knowledge Access (MIKA) tools. fmdtools provides a modeling, simulation, and resiliency analysis framework in which a wildfire response model, the System Modeling and Analysis of Resiliency in Scalable Traffic Management for Emergency Response Operations (SMARt-STEReO), is built. MIKA is an intelligent knowledge manager with several capabilities, including assisting in hazard analysis by extracting and analyzing hazards from historical incident reports. The following topics are covered in the report: Understanding Wildfire Hazard Dynamics. We provide a description and simulated examples of how hazards occur in the SMARt-STEReO model of wildfire response and their effect on its outcome. This provides a common mental model and focuses the analysis presented in the remainder of the report. Wildfire Hazard Identification. MIKA identifies wildfire hazards from three relevant datasets: the ICS-209-PLUS, SAFECOM, and SAFENET. Hazards are manually organized into a taxonomy and MIKA analyzes each hazard’s effects, likelihood, severity, and risk. Evaluating Mitigation Strategies. The SMARt-STEReO wildfire response model built in fmdtools evaluates a subset of identified hazards. Specifically, we simulate the effect of communications faults and equipment faults on operator safety, the effect of changing winds and flammability, and a scenario with multiple ignition points and heavy smoke. Tool Limitations and Usage Considerations. We provide a discussion of appropriate tool use cases as well as limitations and considerations for usage. The tool findings are used to synthesize recommendations for wildfire response operations, which can be captured as part of an IASMS. Key recommendations are as follows: Hazards are identified from a broad spectrum of sources including aircraft subsystems, operational sources, and ground crew operations. Highest risk operational environment hazards identified are Evacuations. The highest risk manned aerial operations hazard categorized is Jumper Operations Mishap. Ground crew hazards that are highest risk are Burns, Cargo Operations Overhead, Dehydration, Entrapment, Falling Objects, Heart Attacks, Heat Exhaustion, Inadequate Training or Certification, Vehicle Breakdown, and Vehicle Collision. Modelled containment failures arise from a mismatch between the difficulty of the firefighting scenario and the capacity (e.g., speed, effectiveness, awareness) of the response. In firefighting scenarios where containment is possible (e.g., because the fire does not spread too quickly), these mismatches can occur because of a change in environmental conditions (e.g., wind, flammability, etc) or because of planning, equipment, or communications faults. Improvements to communications increase the capacity of the firefighting response by reducing the time needed to respond to the fire. While surveillance does not increase this capacity by itself, it increases operator safety by increasing state awareness, enabling firefighters to evade approaching fires. Increasing both has a synergistic effect. In general, these performance and resilience increases generalize over fault scenarios as well as unforeseen changes to circumstances (i.e., wind, aridity, etc.). However, these improvements need to be designed so as not to make the system prone to persistent large-scale communications outages, which can reduce performance.

Hazard analysis↗

Pacific Northwest Health & Air Quality: Monitoring Trends in Air Quality During a Drought Case Study to Improve Public Health Response to Drought Threats

Recent studies have documented a correlation between air quality and drought in the United States, which has been linked with increased aerosols including airborne particulate matter (PM) during drought conditions. This study partnered with local health departments to evaluate trends in air quality in the Pacific Northwest during the evolution of drought conditions using aerosol optical depth (AOD) observations collected by NASA’s Moderate Resolution Imaging Spectroradiometer (MODIS) sensor aboard the Terra and Aqua satellites. These satellite data were analyzed in conjunction with ground-based PM2.5 and PM10 data sourced from the Environmental Protection Agency (EPA)’s network of ground-based monitors and the Standardized Precipitation Evapotranspiration Index (SPEI) drought index. Based on recommendations by local health departments, this study examined air quality trends between 2015 and 2022 in 12 counties within Oregon and Washington that reflected diversity in population density, drought exposure, rural and urban status, and data availability from EPA monitors. Overall, results indicated variation in relationships among drought, satellite, and ground-based air quality data across the study area. This study did not control for the impact of wildfire events on air quality and also did not investigate shorter SPEI aggregation periods, both of which are avenues for future research. This project supplemented research into links between drought and human health and provided health departments with an objective foundation from which they can communicate public health risks to local communities.

Abby Sgan↗

The NASA Orbital Debris Program Office - In Service of Space Safety

Since the NASA Orbital Debris Program Office’s (ODPO) founding in 1979 at the Johnson Space Center in Houston, Texas, it has been at the forefront of orbital debris research, modeling, and policy development. The ODPO has worked in collaboration with NASA and other U.S. government missions since the 1980s to mitigate the growth of the orbital debris environment and protect the population of the Earth. Two main products from the ODPO, the Orbital Debris Engineering Model (ORDEM) and the Debris Assessment Software (DAS), are frequently among the top three most-downloaded software packages from the NASA Software Catalog. These products are provided free of charge to the public in furtherance of the goal to ensure that new space missions, in compliance with NASA’s orbital debris mitigation requirements, are developed, operated, and disposed of responsibly. In addition to these external-facing software tools, the ODPO maintains high-fidelity internal tools for reentry simulation (the Object Reentry Survival Analysis Tool, ORSAT), short-term risk assessment for robotic and human spaceflight missions (the Satellite Breakup Risk Assessment Module, SBRAM), among others. Using data from the ORDEM model, as well as using the Meteoroid Environment Model (MEM) developed by the Meteoroid Environment Office (MEO) at NASA’s Marshall Space Flight Center, the Hypervelocity Impact Technology (HVIT) team uses the BUMPER code to assess penetration risk to space vehicles in Earth orbit and beyond. This paper will discuss the services that the ODPO and HVIT provide, from mission concept development through end-of-mission, for NASA-related and commercial missions.

Chris Ostrom↗

Cali Urban Development: Using NASA Earth Observations to Assess Wetlands and Land Reclamation in Cali, Colombia

Recent research has documented the global decline of wetlands, largely attributed to increased urbanization and agriculture. This NASA DEVELOP study partnered with two local environmental entities in Cali, Colombia: The Fundación Dinamizadores Ambientales and the Departamento Administrativo de Gestión del Medio Ambiente. The team utilized Earth observations to evaluate trends in wetland extent, potential, and land cover in Cali between 2002 and 2023. A supervised classifier was generated within Google Earth Engine to create land use analyses of the region using Landsat 5 TM, Landsat 8 OLI, and Landsat 9 OLI-2 imagery. To identify locations of wetland potential within the study area, wetland probability was assessed by inputting PlanetScope, Sentinel-2 MSI, and partner-provided datasets into the Wetland Intrinsic Potential Tool in ArcGIS Pro and R. Data from Sentinel-1 C-SAR, Sentinel 2-MSI, and Suomi-NPP VIIRS were used to evaluate wetland extent using the Wetland Extent 3.0 Tool in3 Python. Overall, results indicated high wetland potential, particularly in the southeast region where agricultural areas were previously wetlands. Outputs also suggest a vast network of riparian wetlands in Cali. This study did not investigate socioeconomic data as it relates to wetlands, which is an avenue for future research. This project supplemented research into links between land use change, wetland extent, and wetland potential, and provided partner organizations with an objective foundation from which they can identify at-risk wetlands and develop community initiatives for management, conservation, and education.

Cali↗

Exploration Exercise System (EES) Development

Exploration class missions will be required to have an exercise device that is lightweight, has a small footprint, and is capable of providing enough physical stimulus and exercise variability to be an effective countermeasure against muscle and bone loss that results from the microgravity environment. Exploration exercise device prototypes should be evaluated on the ground and in-orbit for feasibility of use in microgravity for long and short duration exploration missions and efficacy of the device to maintain multi-system health and performance. The European Enhanced Exploration Exercise Device (E4D) was selected as the exploration prototype device to be evaluated on ISS for efficacy and feasibility of use as a single multi-modality device for the exercise system for exploration missions. This effort supports the continued development, testing, and verification of E4D hardware and software, internal NASA integration (Human Health and Performance, ISS Vehicle Office, Engineering, and Flight Operations), and external integration across NASA, ESA, and the Danish Aerospace Company (DAC). Providing a feasibility and acceptability assessment from a physiological efficacy and hardware durability standpoint are critical for informing use and risk associated with use on exploration missions. Clearly defined objectives from end users, stakeholders, and Subject Matter Experts (SMEs) will be tested by crewmembers during acute use sessions and long duration use of the exercise device while on ISS. This effort will include a flight study where crewmembers will be asked to exercise using only the E4D during the duration of their mission and participate in a battery of physiological testing to evaluate the efficacy. Hardware is scheduled to launch in FY25 followed by 2 years of operational use after activation and checkout. A final recommendation will be provided to the Artemis program on acceptability of the device for exploration missions. The E4D needs a vibration isolation stabilization (VIS) system that serves as a platform for the exercise hardware to protect the vehicle from loads imparted during exercise. Exploration forward VIS systems will need to protect the vehicle and provide sufficient stabilization for the exerciser during performance of all critical exercises. These enabling capabilities need to be achieved within exploration vehicle power, thermal, mass, and volume limitations.

Kent Lawrence Kalogera↗

Acquisition and Implementation of a Comprehensive Environmental Permits Linking Tool at Savannah River Site - 20234

Historically, Savannah River Nuclear Solutions LLC (SRNS) tracked environmental regulatory commitments and the requirements from hundreds of permits at the Savannah River Site (SRS) using several separate methods, making integrated compliance assurance cumbersome and labor-intensive. When SRNS experienced an increase in environmental issues in 2017, SRNS management and U.S. Department of Energy - Savannah River (DOE-SR) management decided a single, proactive approach was needed to capture environmental permit information (including regulations, Consent Orders, DOE Orders, and any other state or federally issued statement of requirements), track the tasks necessary to ensure compliance with these requirements, and thereby mitigate the risk of noncompliance. SRNS developed a list of mandatory objectives that the tool must meet to function as a Comprehensive Environmental Permits Linking Tool (CEPLT). A key requirement was the ability to map Site permits to their governed locations and display the associated requirements at the compliance point (e.g., outfall, stack, waste unit, etc.). Several options included modifying existing onsite resources, building a custom onsite solution, purchasing an off-the-shelf solution, and contracting an offsite developer to build a custom solution. SRNS concluded an off-the-shelf solution with configuration and customization options would provide the flexibility to fit the unique needs of Savannah River Site (SRS) while taking advantage of industry-tested software and providing a reduced deployment timeline. SRNS chose Gensuite{sup R} a, a cloud-based solution that offers numerous a la carte applications in the environmental, health, and safety arenas, as the best candidate. SRNS selected three (3) integrated applications (Compliance Calendar, Permit Manager, and Mapper) to function as the CEPLT. The Compliance Calendar module allows for creation and tracking of regulatory commitment tasks assigned to responsible environmental professionals. Permit Manager organizes permits and other requirement documents, linking the commitments in each to Compliance Calendar tasks and/or implementing procedures. Mapper provides GIS capability for mapping the data from the other two modules to their physical onsite locations. The CEPLT was configured to allow for other SRS Site Tenants to eventually utilize the applications. Additionally, DOE-SR uses the CEPLT to provide an overview of contractor environmental compliance activities and to organize DOE-specific documents and tasks. The CEPLT fulfilled the requirement of meeting current compliance needs as well as providing the ability to grow as new organizations are incorporated and functionality is expanded. SRNS now uses the CEPLT to more effectively manage permit requirements, improve knowledge transfer, and increase the Site's overall protection of the environment, the Site worker, and the public. Possible future uses of the system include integration of mobile applications for timely communication of potential non-compliant conditions and DOE complex-wide deployment allowing for enhanced DOE site and Head Quarters oversight. Implementation of CEPLT will result in cost savings, both in terms of dollars and man-hours. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Hanford Double Shell Waste Tank Corrosion Studies- Final Report FY2024

For fiscal year (FY) 2024, the Savannah River National Laboratory (SRNL) focused on two experimental tasks related to Hanford Double Shell Tank (DST) chemistry and integrity. The first task focused on understanding risk of corrosion due to formation of either continuous layers or discrete patches of solids on the tanks’ inner sidewalls and bottoms. The objective of this task was to determine the effect of solid deposits on the corrosion risk to the tank bottom, and whether a combination of scale, saltcake and loose solids lead to under deposit corrosion. Electrochemical testing in a single cell arrangement was employed to determine a threshold inhibitor level for the interstitial liquid in the solids, above which carbon steel was not susceptible to corrosion beneath the solids. The inhibitor levels tested were based on the previously determined probability of failure for carbon steel in a simulated waste (i.e., Pitting Factor).

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Pre-flight risk assessment in emergency medical service (EMS) helicopters

A preflight risk assessment system (SAFE) was developed at NASA-Ames Research Center for civil EMS operations to assist pilots in making a decision objectively to accept or decline a mission. The ability of the SAFE system to predict risk profiles was examined at an EMS operator. Results of this field study showed that the usefulness of SAFE was largely dependent on the type of mission flown.

Shively, Robert J.↗

Analogs and the BHP Risk Reduction Strategy for Future Spaceflight Missions

In preparation for future exploration missions to distant destinations (e.g., Moon, Near Earth Objects (NEO), and Mars), the NASA Human Research Program s (HRP) Behavioral Health and Performance Element (BHP) conducts and supports research to address four human health risks: Risk of Behavioral Conditions; Risk of Psychiatric Conditions; Risk of Performance Decrements Due to Inadequate Cooperation, Coordination, Communication, and Psychosocial Adaptation within a Team; and Risk of Performance Errors due to Sleep Loss, Fatigue, Circadian Desynchronization, and Work Overload (HRP Science Management Plan, 2008). BHP Research, in collaboration with internal and external research investigators, as well as subject matter experts within NASA operations including flight surgeons, astronauts, and mission planners and others within the Mission Operations Directorate (MOD), identifies knowledge and technology gaps within each Risk. BHP Research subsequently manages and conducts research tasks to address and close the gaps, either through risk assessment and quantification, or the development of countermeasures and monitoring technologies. The resulting deliverables, in many instances, also support current Medical Operations and/or Mission Operations for the International Space Station (ISS).

Whitmire, Sandra↗

The Trash Compaction Processing System (TCPS) Technology Demonstrations Science Objectives and Requirement Definitions

Throughout the Next STEP Phase A and Phase B, the Trash Compaction Processing System (TCPS) is being developed for a technology demonstration (TD) on the International Space Station (ISS) in 2025. For Phase A, two contractors built proof-of-concept hardware. One contractor was chosen to build the TD hardware for Phase B. Both Phase A lessons learned and risk reduction activities at Ames Research Center (ARC) were used to write the TD science objectives, scope, and requirements. The work at ARC aims to retire technical risks and provide design data to TCPS developers and the ISS system integrators. This paper will summarize the lessons learned from the proof-of-concept hardware, the risk reduction activities, and how these lessons learned form the basis of the TD requirement matrix.

TCPS↗

Applied Risk Analysis for Guiding Homeland Security Policy

Risk analysis methods may be qualitative, semi-quantitative, or quantitative; adopt probabilistic and statistical theories; and implement concepts from core disciplines including operations research, reliability engineering, systems engineering, and applied mathematics. These methods continue to develop and evolve and have successfully been applied to address various homeland security mission challenges in recent years. The objective of this book is to: 1) highlight the role of risk analysis for informing homeland security policy decisions, and 2) describe case studies from academia, government, and industry that apply risk analysis methods for addressing challenges within each of the DHS missions.

national security, risk assessment, risk managemen↗

Concept Study of Robotic Camera-Based Foreign Object Detection for EV Wireless Charging

Wireless charging of an electric vehicle (EV) is an emerging charging technology promising convenient, autonomous, and highly efficient EV charging without requiring heavy gauge cables. However, due to the strong electromagnetic field created by this process that surrounds the wireless charger, the presence of foreign objects can detrimentally interact with it, thus affecting wireless power transfer (WPT) performance or leading to harmful and unwanted safety risks. This paper presents the results for a concept study on a robotic camera-based foreign object detection (FOD) system, as a supplement to the industry-existing overlapped FOD coil array method, for EV wireless charging. A Raspberry PI 4 control board and compatible Raspberry PI Camera Module 2 are used to implement camera-based object detection. The FOD program was developed using a state-of-the-art deep learning object detection model with the OpenCV and Pytorch library and is compatible with camera module hardware. A dry-run test with Raspberry PI and a camera module was conducted and the preliminary FOD function was verified. The feasibility assessment is also validated by comparing the performance of five existing state-of-the-art deep learning object detection models for vehicles, animals, persons, and metals subsets, respectively. Satisfactory performance on the benchmark datasets is observed by the tests, but further improvements are needed in future work when detecting small-sized metallic objects. A programable robotic car is also under development as ongoing work for carrying the Raspberry PI and camera module while moving for the maintenance process.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Practical Application of PRA as an Integrated Design Tool for Space Systems

This paper presents the application of the first comprehensive Probabilistic Risk Assessment (PRA) during the design phase of a joint NASA/NOAA weather satellite program, Geostationary Operational Environmental Satellite Series R (GOES-R). GOES-R is the next generation weather satellite primarily to help understand the weather and help save human lives. PRA has been used at NASA for Human Space Flight for many years. PRA was initially adopted and implemented in the operational phase of manned space flight programs and more recently for the next generation human space systems. Since its first use at NASA, PRA has become recognized throughout the Agency as a method of assessing complex mission risks as part of an overall approach to assuring safety and mission success throughout project lifecycles. PRA is now included as a requirement during the design phase of both NASA next generation manned space vehicles as well as for high priority robotic missions. The influence of PRA on GOES-R design and operation concepts are discussed in detail. The GOES-R PRA is unique at NASA for its early implementation. It also represents a pioneering effort to integrate risks from both Spacecraft (SC) and Ground Segment (GS) to fully assess the probability of achieving mission objectives. PRA analysts were actively involved in system engineering and design engineering to ensure that a comprehensive set of technical risks were correctly identified and properly understood from a design and operations perspective. The analysis included an assessment of SC hardware and software, SC fault management system, GS hardware and software, common cause failures, human error, natural hazards, solar weather and infrastructure (such as network and telecommunications failures, fire). PRA findings directly resulted in design changes to reduce SC risk from micro-meteoroids. PRA results also led to design changes in several SC subsystems, e.g. propulsion, guidance, navigation and control (GNC), communications, mechanisms, and command and data handling (C&DH). The fault tree approach assisted in the development of the fault management system design. Human error analysis, which examined human response to failure, indicated areas where automation could reduce the overall probability of gaps in operation by half. In addition, the PRA brought to light many potential root causes of system disruptions, including earthquakes, inclement weather, solar storms, blackouts and other extreme conditions not considered in the typical reliability and availability analyses. Ultimately the PRA served to identify potential failures that, when mitigated, resulted in a more robust design, as well as to influence the program's concept of operations. The early and active integration of PRA with system and design engineering provided a well-managed approach for risk assessment that increased reliability and availability, optimized lifecyc1e costs, and unified the SC and GS developments.

Kalia, Prince↗

The Spacecraft Fire Experiment (Saffire) - Objectives, Development and Status

Since 2012, the Spacecraft Fire Experiment (Saffire) has been under development by the Spacecraft Fire Safety Demonstration (SFS Demo) project that is funded by NASA's Advanced Exploration Systems Division in the Human Exploration and Operations Mission Directorate. The overall objective of this project is to reduce the uncertainty and risk associated with the design of spacecraft fire safety systems for NASA's exploration missions. This is accomplished by defining, developing, and conducting experiments that address gaps in spacecraft fire safety knowledge and capabilities identified by NASA's Fire Safety System Maturation Team. This paper describes the three Spacecraft Fire Experiments (Saffire-I, -II, and -III) that were developed at NASA-GRC and that will conduct a series of material flammability tests in low-gravity and at length scales that are realistic for a spacecraft fire. The experiments will be conducted in Orbital ATK's Cygnus vehicle after it has unberthed from the International Space Station. The tests will be fully automated with the data downlinked at the conclusion of the test and before the Cygnus vehicle reenters the atmosphere. The objectives of these experiments are to (1) determine how rapidly a large scale fire grows in low-gravity and (2) investigate the low-g flammability limits compared to those obtained in NASA's normal gravity material flammability screening test. The hardware for these experiments has been completed and is awaiting their respective launches, all planned for 2016. This paper will review the objectives of these experiments and how they address several of the knowledge gaps for NASA's exploration missions. The hardware development will be discussed including several novel approaches that were taken for testing and evaluation of these series payloads. The status of the missions and operational status will also be presented.

combustion↗

Developing Probabilistic Safety Performance Margins for Unknown and Underappreciated Risks

Probabilistic safety requirements currently formulated or proposed for space systems, nuclear reactor systems, nuclear weapon systems, and other types of systems that have a low-probability potential for high-consequence accidents depend on showing that the probability of such accidents is below a specified safety threshold or goal. Verification of compliance depends heavily upon synthetic modeling techniques such as PRA. To determine whether or not a system meets its probabilistic requirements, it is necessary to consider whether there are significant risks that are not fully considered in the PRA either because they are not known at the time or because their importance is not fully understood. The ultimate objective is to establish a reasonable margin to account for the difference between known risks and actual risks in attempting to validate compliance with a probabilistic safety threshold or goal. In this paper, we examine data accumulated over the past 60 years from the space program, from nuclear reactor experience, from aircraft systems, and from human reliability experience to formulate guidelines for estimating probabilistic margins to account for risks that are initially unknown or underappreciated. The formulation includes a review of the safety literature to identify the principal causes of such risks.

Safety Performance Margin↗