Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Risk informed approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29
All sourcesNASA NTRSDOE OSTI
NASA NTRS1999

Continuous Risk Management: A NASA Program Initiative

NPG 7120.5A, "NASA Program and Project Management Processes and Requirements" enacted in April, 1998, requires that "The program or project manager shall apply risk management principles..." The Software Assurance Technology Center (SATC) at NASA GSFC has been tasked with the responsibility for developing and teaching a systems level course for risk management that provides information on how to comply with this edict. The course was developed in conjunction with the Software Engineering Institute at Carnegie Mellon University, then tailored to the NASA systems community. This presentation will briefly discuss the six functions for risk management: (1) Identify the risks in a specific format; (2) Analyze the risk probability, impact/severity, and timeframe; (3) Plan the approach; (4) Track the risk through data compilation and analysis; (5) Control and monitor the risk; (6) Communicate and document the process and decisions.

Hammer, Theodore F.↗
NASA NTRS2003

Managing information technology security risk

Information Technology (IT) Security Risk Management is a critical task for the organization to protect against the loss of confidentiality, integrity and availability of IT resources. As systems bgecome more complex and diverse and and attacks from intrusions and malicious content increase, it is becoming increasingly difficult to manage IT security risk. This paper describes a two-pronged approach in addressing IT security risk and risk management in the organization: 1) an institutional enterprise appraoch, and 2) a project life cycle approach.

security toolset↗
NASA NTRS2006

Lightweight Ablative and Ceramic Thermal Protection System Materials for NASA Exploration Systems Vehicles

As a collaborative effort among NASA Centers, the "Lightweight Nonmetallic Thermal Protection Materials Technology" Project was set up to assist mission/vehicle design trade studies, to support risk reduction in thermal protection system (TPS) material selections, to facilitate vehicle mass optimization, and to aid development of human-rated TPS qualification and certification plans. Missions performing aerocapture, aerobraking, or direct aeroentry rely on advanced heatshields that allow reductions in spacecraft mass by minimizing propellant requirements. Information will be presented on candidate materials for such reentry approaches and on screening tests conducted (material property and space environmental effects tests) to evaluate viable candidates. Seventeen materials, in three classes (ablatives, tiles, and ceramic matrix composites), were studied. In additional to physical, mechanical, and thermal property tests, high heat flux laser tests and simulated-reentry oxidation tests were performed. Space environmental effects testing, which included exposures to electrons, atomic oxygen, and hypervelocity impacts, was also conducted.

Valentine, Peter G.↗
DOE OSTI2023

Evidence-based target setting informs blue carbon strategies for nationally determined contributions

The magnitude and pace of global climate change demand ambitious and effective implementation of nationally determined contributions (NDCs). Nature-based solutions present an efficient approach to achieving mitigation, adaptation and resilience goals. Yet few nations have quantified the diverse benefits of nature-based solutions to evaluate and select ecosystem targets for their NDCs. Here we report on Belize’s pursuit of innovative, evidence-based target setting by accounting for multiple benefits of blue carbon strategies. Through quantification of carbon storage and sequestration and optimization of co-benefits, we explore time-bound targets and prioritize locations for mangrove protection and restoration. We find increases in carbon benefits with larger mangrove investments, while fisheries, tourism and coastal risk-reduction co-benefits grow initially and then plateau. We identify locations, currently lacking protected status, where prioritizing blue carbon strategies would provide the greatest delivery of co-benefits to communities. These findings informed Belize’s updated NDCs to include an additional 12,000 ha of mangrove protection and 4,000 ha of mangrove restoration, respectively, by 2030. Our study serves as an example for the more than 150 other countries that have the opportunity to enhance greenhouse gas sequestration and climate adaptation by incorporating blue carbon strategies that provide multiple societal benefits into their NDCs.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Summary of Methodology for Mitigating Risks Associated with Licensing and Qualifying AM Nuclear Materials

The US Department of Energy’s Advanced Materials and Manufacturing Technologies (AMMT) program focuses on accelerating the development, qualification, demonstration, and deployment of advanced materials and manufacturing technologies to enable reliable and economical nuclear energy. Laser powder bed fusion (LPBF) is one of the most popular additive manufacturing (AM) processes for fabricating components with intrinsically complex geometries. LPBF was extensively explored for nuclear applications under the previous Transformational Challenge Reactor program. Additionally, Oak Ridge National Laboratory developed and licensed the Peregrine software and larger digital platform that couples machine learning and in situ data collection during AM to detect anomalies and any evolved defects. The digital platform will be critical to (1) the qualification of AM components for nuclear applications that link location-specific data to macroscopic properties and (2) predict final component performance. Current in situ process monitoring tools are valuable for observing the formation of stochastic flaws, but additional data are needed to predict the resulting microstructures and associated material performance. Rapid cooling rates and large thermal gradients have caused large heterogeneities in the microstructure, which cause anisotropy in mechanical performance. The AMMT program is evaluating the best approaches for addressing these heterogeneities and their effect on component performance using a combination of multiscale modeling, enhanced in situ process monitoring, and high throughput experimental testing. This report summarizes strategies for mitigating the risks associated with qualifying AM components, including developing new sensing capabilities for in situ process monitoring and characterizing melt pool solidification and residual stresses to inform multiscale modeling efforts.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

The National Solar Radiation Database Final Report: Fiscal Years 2022-2024

The National Solar Radiation Database (NSRDB) is the leading public source of high-resolution solar resource data in the United States, with more than 400,000 users annually. This database represents the state of the art in the satellite-based estimation of solar resource information and uses a unique physics-based modeling approach that enables improvements in accuracy with the deployment of the next-generation geostationary satellites. Making the highest-quality, state-of-the-art, regularly updated datasets available on a timely basis for users reduces costs of solar deployment by providing accurate information for siting studies and system output prediction and thereby reduces project financing costs and risks.

14 SOLAR ENERGY↗
NASA NTRS2008

Managing Large Scale Project Analysis Teams through a Web Accessible Database

Large scale space programs analyze thousands of requirements while mitigating safety, performance, schedule, and cost risks. These efforts involve a variety of roles with interdependent use cases and goals. For example, study managers and facilitators identify ground-rules and assumptions for a collection of studies required for a program or project milestone. Task leaders derive product requirements from the ground rules and assumptions and describe activities to produce needed analytical products. Disciplined specialists produce the specified products and load results into a file management system. Organizational and project managers provide the personnel and funds to conduct the tasks. Each role has responsibilities to establish information linkages and provide status reports to management. Projects conduct design and analysis cycles to refine designs to meet the requirements and implement risk mitigation plans. At the program level, integrated design and analysis cycles studies are conducted to eliminate every 'to-be-determined' and develop plans to mitigate every risk. At the agency level, strategic studies analyze different approaches to exploration architectures and campaigns. This paper describes a web-accessible database developed by NASA to coordinate and manage tasks at three organizational levels. Other topics in this paper cover integration technologies and techniques for process modeling and enterprise architectures.

O'Neil, Daniel A.↗
NASA NTRS2011

Ares I-X Malfunction Turn Range Safety Analysis

Ares I-X was the designation given to the flight test version of the Ares I rocket which was developed by NASA (also known as the Crew Launch Vehicle (CLV) component of the Constellation Program). The Ares I-X flight test vehicle achieved a successful flight test on October 28, 2009, from Pad LC-39B at Kennedy Space Center, Florida (KSC). As part of the flight plan approval for the test vehicle, a range safety malfunction turn analysis was performed to support the risk assessment and vehicle destruct criteria development processes. Several vehicle failure scenarios were identified which could have caused the vehicle trajectory to deviate from its normal flight path. The effects of these failures were evaluated with an Ares I-X 6 degrees-of-freedom (6-DOF) digital simulation, using the Program to Optimize Simulated Trajectories Version II (POST2) simulation tool. The Ares I-X simulation analysis provided output files containing vehicle trajectory state information. These were used by other risk assessment and vehicle debris trajectory simulation tools to determine the risk to personnel and facilities in the vicinity of the launch area at KSC, and to develop the vehicle destruct criteria used by the flight test range safety officer in the event of a flight test anomaly of the vehicle. The simulation analysis approach used for this study is described, including descriptions of the failure modes which were considered and the underlying assumptions and ground rules of the study.

Beaty, J. R.↗
NASA NTRS2014

Radiation Quality Effects on Transcriptome Profiles in 3-D Cultures After Charged Particle Irradiation

In this work, we evaluated the differential effects of low- and high-LET radiation on 3-D organotypic cultures in order to investigate radiation quality impacts on gene expression and cellular responses. Current risk models for assessment of space radiation-induced cancer have large uncertainties because the models for adverse health effects following radiation exposure are founded on epidemiological analyses of human populations exposed to low-LET radiation. Reducing these uncertainties requires new knowledge on the fundamental differences in biological responses (the so-called radiation quality effects) triggered by heavy ion particle radiation versus low-LET radiation associated with Earth-based exposures. In order to better quantify these radiation quality effects in biological systems, we are utilizing novel 3-D organotypic human tissue models for space radiation research. These models hold promise for risk assessment as they provide a format for study of human cells within a realistic tissue framework, thereby bridging the gap between 2-D monolayer culture and animal models for risk extrapolation to humans. To identify biological pathway signatures unique to heavy ion particle exposure, functional gene set enrichment analysis (GSEA) was used with whole transcriptome profiling. GSEA has been used extensively as a method to garner biological information in a variety of model systems but has not been commonly used to analyze radiation effects. It is a powerful approach for assessing the functional significance of radiation quality-dependent changes from datasets where the changes are subtle but broad, and where single gene based analysis using rankings of fold-change may not reveal important biological information.

Patel, Zarana S.↗
NASA NTRS2014

Radiation Quality Effects on Transcriptome Profiles in 3-d Cultures After Particle Irradiation

In this work, we evaluate the differential effects of low- and high-LET radiation on 3-D organotypic cultures in order to investigate radiation quality impacts on gene expression and cellular responses. Reducing uncertainties in current risk models requires new knowledge on the fundamental differences in biological responses (the so-called radiation quality effects) triggered by heavy ion particle radiation versus low-LET radiation associated with Earth-based exposures. We are utilizing novel 3-D organotypic human tissue models that provide a format for study of human cells within a realistic tissue framework, thereby bridging the gap between 2-D monolayer culture and animal models for risk extrapolation to humans. To identify biological pathway signatures unique to heavy ion particle exposure, functional gene set enrichment analysis (GSEA) was used with whole transcriptome profiling. GSEA has been used extensively as a method to garner biological information in a variety of model systems but has not been commonly used to analyze radiation effects. It is a powerful approach for assessing the functional significance of radiation quality-dependent changes from datasets where the changes are subtle but broad, and where single gene based analysis using rankings of fold-change may not reveal important biological information. We identified 45 statistically significant gene sets at 0.05 q-value cutoff, including 14 gene sets common to gamma and titanium irradiation, 19 gene sets specific to gamma irradiation, and 12 titanium-specific gene sets. Common gene sets largely align with DNA damage, cell cycle, early immune response, and inflammatory cytokine pathway activation. The top gene set enriched for the gamma- and titanium-irradiated samples involved KRAS pathway activation and genes activated in TNF-treated cells, respectively. Another difference noted for the high-LET samples was an apparent enrichment in gene sets involved in cycle cycle/mitotic control. It is plausible that the enrichment in these particular pathways results from the complex DNA damage resulting from high-LET exposure where repair processes are not completed during the same time scale as the less complex damage resulting from low-LET radiation.

Patel, Z. S.↗
NASA NTRS1997

The GSFC Combined Approach of ODC Stockpiling and Tribological Testing to Mitigate the Risks of ODC Elimination

In response to the elimination of production of several Ozone Depleting Chemicals (ODCs) which have been widely used in successful space flight mechanism cleaning and lubricating procedures, GSFC developed and implemented an overall philosophy of mitigating the risks to flight hardware during the transition phase to ODC-Free cleaning procedures. One leg of that philosophy is the initiation of a several tier testing program which will deliver increasing amounts of information over the next few years, starting with original surface analysis comparisons between ODC and various ODC-Free cleaning technologies. The other leg is the stockpiling of an appropriate amount of ODC solvents such that all short term GSFC missions will be able to stay with or revert to heritage cleaning and lubricating procedures in the face of life issues. While tribological testing, mechanism life testing and space-flight experience will ultimately bring us into the 21st century with environmentally friendly means of cleaning long-life precision mechanism components, many satellites will be launched over the next few years with a number of important tribological questions unanswered. In order to prepare for this challenge, the Materials Engineering Branch in cooperation with the Electromechanical Branch launched an intensive review of all ongoing missions. The failure risk was determined for each long-life mechanism based on a number of parameters, including a comparison of flight solvents used to clean the heritage/life test hardware. Also studied was the ability of the mechanism manufacturers to stockpile ODCs based on state laws and company policies. A stockpiling strategy was constructed based on this information and subsequently implemented. This paper provides an overview of the GSFC ODC elimination risk mitigation philosophy as well as a detailed examination of the development of the ODC stockpiling plan.

Predmore, Roamer↗
DOE OSTI2022

A framework to implement human reliability analysis during early design stages of advanced reactors

Nuclear power plants require human actions throughout their lifecycle from design, construction, operation, and decommissioning. However, for advanced reactors (e.g., Generation IV), the reliance on human intervention in safety-related actions is expected to be reduced or completely replaced by automated actions. The Probabilistic Risk Assessment (PRA) Standard for Advanced Non-LWR Nuclear Power Plants requires that the impacts of all operator actions are captured and incorporated in the risk of the modeled plant. Moreover, the Modernization of Technical Requirements for Licensing Advanced Reactors requires human reliability analysis (HRA) to be included throughout all design and PRA development stages. However, due to the lack of details during the early design stages, HRA is often postponed until the design is mature enough. Conducting HRA in later design stages, though it may be adequate in capturing pre-, at-, and post-initiators comes short of informing the design itself in the iterative design lifecycle. Hence, this paper presents a framework to include HRA during the design's early stages, pre-conceptual or conceptual. The proposed framework provides a process for the removal of operator actions that do not contribute to the risk and the identification of all key operator actions that are critical to the safety of the design. The results of this framework are then used to inform the design of those safety-related operator actions to update the design further. Then, using information from the updated design, this framework can be reapplied to investigate the impact of the design update on human reliability. The PRA model of the X-energy's pre-conceptual Xe-100 high-temperature gas-cooled pebble-bed reactor (HTGR-PB) design is used to demonstrate the approach. In the pre-conceptual Xe-100 PRA model, also called Phase 0 PRA model, human actions were considered an integral part of analyzing the plant response to different initiating events. Hence, in this paper, all possible human actions in the Xe-100 PRA model are identified, analyzed, and removed to emulate a design relying only on the available automated control systems. The preliminary results of this assessment show how safe the Xe-100 design is even without crediting any human actions. The results also list necessary sequences in which operator actions are critical to the risk profile of the design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

A Systematic Evidence Based Performance Approach to Regulation of Nuclear Sites in England and Wales - 20058

The Environment Agency for England has developed a systematic evidence-based approach to pursue our strategic environmental objectives for the regulation of nuclear sites. We use an annual evidence review process to ensure effective and efficient targeting of limited resources to achieve those objectives. Over the last 8 years, we have been developing and refining this approach to ensure risk-based and value driven regulation. The approach comprises nuclear site and nuclear sector review processes known as Site Environment Review (SER) and Nuclear Environment Review (NER). This approach complements our regulation of nuclear site permit holders under the Environmental Permitting Regulations (EPR). We deliver our regulation of nuclear sites in England and Wales alongside the Office for Nuclear Regulation. The SER process involves the lead regulator for each nuclear site assessing the permit holder's environmental performance across 14 themes, set within the context of the site's main activities and associated waste disposals. Our themes include environmental leadership, resources and climate change, radioactive waste management, facility management and decommissioning, groundwater, and environmental radiological protection. We use evidence from site inspections and working within our subject matter groups to grade current and predicted future environmental performance. We are particularly interested in sustainability and the application of Best Available Techniques (BAT) to prevent the creation, and minimise the disposal, of radioactive wastes. We use risk analysis (strengths, weaknesses, threats and opportunities) to examine performance against our strategic environmental objectives, which are set out, in our 5-year Nuclear Delivery Plan (NDP). The output supports the targeting of our resources at each nuclear site. We consult the relevant permit holders on the SER priorities and use their feedback to refine our plans. We expect all permit holders to take account of our priorities when considering their own programmes of work, objectives and plans. The NER process brings together what we learn and achieve through regulation across the sector. It provides input to planning priorities, supported by qualitative and semi-quantitative evidence. It covers the 28 nuclear sites in England and Wales and spans the same 14 environmental themes. During the process we collate, compile and summarise evidence from the SERs and other sources such as inspection reports and evidence from our other nuclear work programmes. The output is the NER annual report. This provides a snapshot of the status of the nuclear sector and gives insights to enable us to regulate more efficiently and effectively. It also takes account of cross-cutting issues and risks such as changes in international standards, domestic policy, regulatory framework, domestic standards and guidance, learning from experience such as incidents, events and good practice, and innovation, research and development. It provides graphics that illustrate the grading of environmental performance for the nuclear sector across the fourteen environmental themes. This analysis allows benchmarking of nuclear site's environmental performance and the visualisation provides a convenient comparison of performance across themes, sites, and over time. We use this intelligence to inform our investment in training and development of our staff, and our cross-cutting engagement on strategic issues with government, the Nuclear Decommissioning Authority (NDA) and other corporate organisations. Adopting this approach can provide benefits with organisational reputation, stakeholder participation and ensuring value from the public investment. This paper describes the history of the SER/NER process, a selection of outputs from the process and ideas for improvement. The paper will be of interest to other regulators and organisations across the world that are interested in supporting continuous improvement. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

Enabling site-specific well leakage risk estimation during geologic carbon sequestration using a modular deep-learning-based wellbore leakage model

Geologic carbon sequestration (GCS) is a promising technology for mitigating net carbon emissions and growing climate concern by storing CO 2 in reservoirs. Oil and gas brownfields are an attractive option for CO 2 storage, but these sites have many historical wellbores from petroleum production and can be a potential leakage pathway for CO 2 or formation brine. Therefore, risk management of GCS operations requires an assessment of potential well leakage. Due to the high uncertainty of the system, stochastic approaches are ideal for quantifying the range of risk behaviors, but they must be computationally efficient in the face of complex physics. Here, we develop a new physics-centric deep learning wellbore model to predict the leakage of CO 2 and brine through leaky wellbores. Multi-physics numerical simulations were used to generate data sets, and physics-informed features were introduced. Neural networks were optimized with an automated searching algorithm. Feature analysis quantifies the impact of each feature on model prediction and confirms the role of physics-inspired parameters. The model shows high predictive performance across a wide range of geologic and injection conditions and well attributes. In conclusion, a case study illustrates how the model is applied to assess well leakage in GCS operations.

58 GEOSCIENCES↗
DOE OSTI2025

Copula based Damage Detection for Structural Health Monitoring

This project utilizes copulas for damage detection in a Structural Health Monitoring (SHM) application. A copula-based system was chosen for the benefit of multivariate joint distribution with a goal to detect damage based on how the system as a whole reacts rather than one or two sensors by themselves. Copulas are commonly used in the field of finance for risk modeling based on two or more random inputs. A few applications in the field of SHM and Non-Destructive Evaluation (NDE) have been researched mostly on risk or reliability of the structure. The goal of this project is to determine if a copula-based approach can be used for damage detection. An unsupervised learning method was desired to reduce the dimensionality, minimal training, and be a faster evaluation method than other unsupervised methods. If a copula method can be used to detect damage what additional information on the damage can be interpreted. The remainder of this report will go over the background needed, SHM methodology, SHM applications, conclusions, and future developments.

47 OTHER INSTRUMENTATION↗
DOE OSTI2025

Navigating Epistemic Uncertainty in the Management of Flash Droughts

Abstract: Flash droughts, characterized by their rapid onset, sharply contrast with the typically gradual development of traditional droughts. These events are triggered by a combination of low rainfall and high evaporation rates, driven by elevated temperatures, making them particularly challenging to predict and prepare for. As a relatively new concept, flash drought is not well understood, which introduces significant epistemic uncertainties regarding their nature and detection methods. This under-detection hinders planners' ability to effectively manage these events. Despite these uncertainties, flash droughts can have significant impacts, raising the question: how can decision-makers prepare for such events given the current knowledge gaps? To address this, we propose a methodological framework aimed at enhancing flash drought preparedness by guiding the selection of appropriate indicators based on their detection capabilities and the decision-makers' level of risk aversion. Our approach involves evaluating six different flash drought indicators and analyzing the level of agreement among them. Additionally, we consider the decision-makers' risk aversion, distinguishing between those who require consensus across all methods (risk-takers) and those who act based on a single method's indication (risk-averse). The insights gained from this study offer a pathway towards more informed decision-making processes regarding flash droughts, potentially mitigating their adverse effects through better preparedness and response strategies.

climate resilience↗
NASA NTRS2019

Human Performance Contributions to Safety in Commercial Aviation

Every day in aviation, pilots, air traffic controllers, and other front-line personnel perform countless correct judgments and actions in a variety of operational environments. These judgments and actions are often the difference between an accident and a non-event. Ironically, data on these behaviors are rarely collected or analyzed. Data-driven decisions about safety management and design of safety-critical systems are limited by the available data, which influence how decision makers characterize problems and identify solutions. Large volumes of data are collected on the failures and errors that result in infrequent incidents and accidents, but in the absence of data on behaviors that result in routine successful outcomes, safety management and system design decisions are based on a small sample of nonrepresentative safety data. This assessment aimed to find and document “safety successes” made possible by human operators. With many Aeronautics Research Mission Directorate (ARMD) Programs and Projects focusing on increased automation and autonomy and decreased human involvement, failure to fully consider the human contributions to successful system performance in civil aviation represents a significant risk — a risk that has not been recognized to date. Without understanding how humans contribute to safety, any estimate of predicted safety of autonomous capabilities is incomplete and inherently suspect. Furthermore, understanding the ways in which humans contribute to safety can promote strategic interactions among safety technologies, functions, procedures and the people using them. Without this understanding, the full benefits of an integrated, optimized human/technology or autonomous system will not be realized. Historically, safety has been consistently defined in terms of the occurrence of accidents or recognized risks (i.e., in terms of things that go wrong). These adverse outcomes are explained by identifying their causes, and safety is restored by eliminating or mitigating these causes. An alternative to this approach is to focus on what goes right and identify how to replicate that process. Focusing on the rare cases of failures attributed to “human error” provides little information about why human performance routinely prevents adverse events. Hollnagel has proposed that things go right because people continuously adjust their work to match their operating conditions. These adjustments become increasingly important as systems continue to grow in complexity. Thus, the definition of safety should reflect not only “avoiding things that go wrong” but “ensuring that things go right.” The basis for safety management requires developing an understanding of everyday activities. However, few mechanisms to monitor everyday work exist in the aviation domain, which limits opportunities to learn how designs function in reality. This concept of safety thinking and safety management is reflected in the emerging field of resilience engineering. According to Hollnagel, a system is resilient if it can sustain required operations under expected and unexpected conditions by adjusting its functioning prior to, during, or following changes, disturbances, and opportunities. To explore “positive” behaviors that contribute to resilient performance in commercial aviation, the assessment team examined a range of existing sources of data about pilot and air traffic control (ATC) tower controller performance, including subjective interviews with domain experts and objective aircraft flight data records. These data were used to identify strategies that support resilient performance, methods for exploring and refining those strategies in existing data, and proposed methods for capturing and analyzing new data.

Null, Cynthia H.↗
DOE OSTI2025

Tale of Two Domains: Cyber - Physical

As devices and systems continue to modernize and adopt integrated circuits, the use of cyber technology to deploy an application is the expectation. This deployment through cyber assets brings new cyber risk and cybersecurity is the practice of managing this risk. Cyber-risk is constantly changing due to the speed of technology advancement and the changing quality of the adversary. Cyber-Informed Engineering (CIE) mitigates cyber-risk through engineering controls where as the traditional practice of cybersecurity mitigates cyber-risk through cybersecurity controls. By clearly defining the cyber-physical boundary, engineering controls and cybersecurity controls can clearly demonstrate their complementary nature to provide layered defenses and successfully mitigate cyber-risk through independent controls. In this paper, a layered model of device decomposition of the the cyber-physical boundary is presented to provide clarity where engineering controls are used to reduce cyber-risk within the physics, functional materials, electronic, or integrated circuit layers and where cybersecurity controls are used to reduce cyber-risk within the machine code and application layers. By implementing both traditional cybersecurity controls and engineering controls, a more holistic approach to cybersecurity is achieved in protecting modern devices and systems, as well as a clear awareness in identifying, documenting, and authorizing the system’s cybersecurity protection scheme is achieved.

42 - ENGINEERING↗