Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System Operations”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 541 records · Page 30
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Operating-Envelopes-Aware Decentralized Welfare Maximization for Energy Communities: Preprint

We propose an operating-envelope-aware, prosumer-centric, and efficient energy community that aggregates individual and shared community distributed energy resources downstream of a regulated distribution system operator's (DSO) net energy metering revenue meter. Due to the elevated risk of grid constraint violations and to ensure safe network operation, the DSO imposes dynamic export and import limits, known as dynamic operating envelopes, on end-users' revenue meters. Given the operating envelopes, the proposed community market mechanism maximizes the community's social welfare in a decentralized fashion while every community member abides by its own operating envelopes. We show that the proposed market mechanism conforms with the cost-causation principle and guarantees community members a surplus level no less than their maximum surplus when they autonomously face the DSO. Lastly, a numerical study is implemented to showcase and compare the community's welfare under the proposed operating-envelopes-aware mechanisms to others, including the welfare of customers under the DSO's regime.

distributed energy resources aggregation↗
DOE OSTI2025

Success Path Method: Conformance with Safety Management Systems

All industrial facilities deal with safety hazards such as equipment failures, chemical and toxic releases, and fires and explosions just to name a few. A disciplined framework for managing the integrity of operating systems and processes that handle hazardous substances by applying good design principles, engineering, and operating practices is called process safety. The goal of such framewoks is to prevent the release of energy or material that could cause harm to people or damage to equipment and/or environment. Process safety covers all aspects of facility operation also including design, maintenance, and human and organizational factors that could possibly have effect on process safety. As it will be seen from the discussion below, process safety is just one of the pieces of the much bigger matter, a safety culture. Many industries have long recognized the importance of safety culture in their day-to-day operation. Although the definition of safety culture can slightly differ from organization to organization, in general, a safety culture is how things are done to demonstrate a commitment to safety by everyone involved. An organization acquires safety culture over time as the product of individual and group values, actions, and behaviors toward overall safety. It is important to note that safety culture should not be viewed as some static state that an organization wants to reach. It is more like a constantly evolving level of “how things are done when nobody is watching.” Safety culture is an inherent characteristic of an organization, it is always present, but the level can range on a continuum from undesirable to desirable or more commonly used, from negative to positive. An example for an undesirable, negative safety culture would be a company in which accidents resulting in harm (physical and/or emotional) of its employees, equipment or surrounding environment and community occur frequently. At the other end of the spectrum would be a company in which such accidents are rare or do not occur at all (desired or positive safety culture). Every company/industry exists somewhere within this spectrum.

42 ENGINEERING↗
DOE OSTI2025

Century: Zap Energy’s 100-kW-Scale Repetitive Sheared-Flow-Stabilized Z -Pinch System with Liquid Metal Cooling

Zap Energy is developing the sheared-flow-stabilized (SFS) Z-pinch concept for commercial applications. The SFS Z pinch relies on plasma self-organization, in the sense that plasma dynamics play a critical role in confinement. Using plasma axial current for confinement and compression eliminates the need for external confinement or heating technologies. This compact magnetic confinement technology could, in turn, provide the basis for a cost-effective deuterium-tritium fusion power plant. In addition to a robust experimental program pushing plasma performance towards breakeven conditions, Zap Energy has parallel programs developing power handling systems suitable for future power plants. Technologies under development include high average-power repetitive pulsed power, high duty-cycle cathodes, and liquid metal wall systems. Century is the name of Zap Energy’s first effort to integrate these three components into an operational system capable of firing non-reacting hydrogen SFS Z-pinch plasmas into a liquid-metal-lined container at sustained repetition rates on the order of 0.1 Hz. Here, the pulsed power driver and liquid metal heat exchanger are both designed to sustain input powers of 100 kW. Construction and initial operations with an interim ~10 kW liquid metal heat exchanger are described.

Century↗
DOE OSTI2020

Technology Development and Field Monitoring in nZEB - US Country report IEA HPT Annex 49 Task 3

The International Energy Agency (IEA) Heat Pumping Technologies (HPT) Annex 49, “Design and Integration of Heat Pumps for Nearly Zero Energy Buildings,” deals with the application of heat pumps (HPs) as a core component of the HVAC system for nearly or net-zero energy buildings. This report covers the Task 3 activities of the US team. Three institutions are involved on the US team and have worked on the following projects. 1) Oak Ridge National Laboratory (ORNL) summarized development activities since the conclusion of IEA HPT Annex 40 for several integrated HP (IHP) systems - electric ground-source IHP and air-source IHP versions and engine-driven AS-IHP version. 2) The University of Maryland partnered with ORNL and Blue Bear Management to develop a personal cooling device called RoCo that can provide personalized conditioned air to occupants in inadequately or unconditioned environments. With RoCo, building facility management can elevate the HVAC thermostat settings without compromising occupants’ thermal comfort. Researchers have found that a 4°F increase in thermostat settings can save 12–30% energy savings. Therefore, RoCo is a promising technology that can help reduce building energy consumption and facilitate achievement of net-zero energy building performance. 3) The National Institute of Standards and Technology (NIST) is working on a field study effort on the NIST Net-Zero Energy Residential Test Facility. Two air-source split-system HPs were installed in a residential, net-zero energy home that was constructed as a laboratory on the NIST campus in Gaithersburg, Maryland. The first HP was a two-stage, 7 kW (2 ton), 15.8 seasonal energy efficiency ratio (SEER), 9.05 heating seasonal performance factor (HSPF) conventionally ducted system; the second HP was a variable-speed, 10.6 kW (3 ton), 14 SEER, 8.35 HSPF, high-velocity ducted system. These two systems operated side by side, using separate supply ducts and a common return duct, on a weekly alternating schedule to condition the home that was operated with very consistent simulated thermal loads. The team wanted to determine whether the high-velocity system could provide comparable energy-use efficiency to the conventional system. The results of this study showed that it did meet the required loads and had slightly greater efficiency; the average cooling coefficient of performance (COP) was (0.40 ± 0.11) higher, and the average heating COP was statistically equal. A new firmware was provided at the end of the heating season that greatly improved the performance of the high-velocity system; its average heating COP went from (1.8 ± 0.9) to (2.5 ± 1.1) at a 95% confidence level. The new firmware heating COP averaged (1.05 ± 0.23) higher than the old firmware over the same outdoor temperatures. The defrost performance is very different for these two systems, yet they consumed equivalent energy per HDD. The conventional system uses a timed-initiate, temperature-terminate algorithm with auxiliary electric resistive heating, whereas the high-velocity system uses calculated evaporator parameters with a hot-gas bypass before a full reverse-cycle defrost with no supplementary resistive heat.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2026

Geologic Seawater Air Conditioning (GeoSWAC) System: Resource Assessment and Techno-Economic Evaluation in Puerto Rico

Puerto Rico's hot, humid climate drives a high and persistent demand for cooling, straining an aging and fuel-dependent energy grid while increasing peak electricity loads. Much of this challenge stems from inefficient air-conditioning systems operating in buildings without passive cooling design, making cooling both costly and vulnerable to disruption - especially during hurricanes. To address these issues, researchers evaluated a new alternative called Geologic Seawater Air Conditioning (GeoSWAC), which uses inland wells connected to naturally cold, deep seawater. By avoiding long offshore pipelines and energy-intensive refrigeration cycles, GeoSWAC can cut electricity use by 75-90%, reduce environmental impacts, and operate more reliably during power outages. A case study at the University of Puerto Rico's Rio Piedras campus found that GeoSWAC could deliver significantly lower levelized costs of cooling, reduced operational expenses, and improved water conservation compared to the campus's existing chilled-water plant. The system offers key advantages - including access to a constant cold heat sink, low pumping requirements, and enhanced resilience - for coastal regions such as Puerto Rico, the broader Caribbean, and Florida. However, its effectiveness depends heavily on site-specific geological conditions, such as subsurface connectivity and aquifer characteristics, which require detailed investigation. Future research should refine hydrogeological models, conduct performance and economic analyses, and address regulatory and permitting frameworks to support broader adoption of this promising technology.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Photovoltaic Analysis and Response Support (PARS) Platform for Solar Situational Awareness and Resiliency Services

The project's primary objective is to develop a digital-twin based Photovoltaic (PV) Analysis and Response Support (PARS) platform, which aims to provide real-time situational awareness and optimal response plans. This platform is designed to enhance the performance of hybrid PV systems, making them competitive with or even superior to conventional generation resources. The PARS platform enabled the project team to develop and evaluate an extensive suite of grid support functionalities for the hybrid PV systems to enhance grid performance, across key areas including visibility, dispatchability, security, resilience, and reliability. Given the global push toward achieving 100% clean energy by 2035, there is a significant increase in the integration of inverter-based resources (IBRs) throughout the energy grid. Effectively managing the inherent variability and uncertainty associated with IBRs is crucial for ensuring cost-effectiveness, reliability, and security in both the main grid and islanded microgrids. Constrained to a limited array of IEEE test systems or standard feeder models, traditional IBR modeling struggles to assimilate new field data, accurately reflect system dynamics, and adapt to the evolving energy landscape. In our project, we embraced a Digital Twin (DT) strategy for crafting the PARS platform. A digital twin acts as a precise virtual counterpart of a physical system, built on historical data and continuously honed with real-time insights. This enables the high-fidelity DT to accurately mirror current system operations and forecast future scenarios. Consequently, the PARS platform becomes an ideal environment for testing and refining monitoring, control, power, and energy management algorithms designed to boost hybrid PV system performance. The defining feature of the PARS platform, distinguishing it from other advanced simulation tools, is its exceptional adaptability. This is achieved by employing actual network topologies and utilizing real-time field data for fine-tuning and calibration, ensuring a close emulation of real-world conditions. The project deliverables include: 1) High-fidelity IBR models and tools for real-time parameterization, utilizing real-time field measurements to refine IBR models for enhanced accuracy and performance; 2) Grid-forming and Grid-following capabilities to deliver resilience services, including blackstart, voltage and frequency support, cold-load pick-up, power reserves, and three-phase load balancing across grid-connected and microgrid settings; 3) Machine learning-based forecasting tools and methods for generating synthetic data and topologies, creating diverse and realistic simulation environments for evaluating varied operational scenarios; 4) Advanced microgrid power and energy management algorithms for optimizing the integration and operation of PV, storage, and demand response resources within both feeder and community scales. The power grid data sets are provided by four utility companies in North Carolina and the New York Power Administration. Acting as industry advisors, our industry partners communicated stakeholder needs and regulatory standards to the research teams, aiding technology transfer by incorporating the developed methodologies into their daily operations. This collaboration ensures that the PARS platform, functioning as a power system digital twin, enhances our understanding of IBR dynamic behaviors and enables the development and evaluation of IBR control functions that match or exceed the capabilities of conventional synchronous generators.

14 SOLAR ENERGY↗
DOE OSTI2024

Experimental and Modeled Assessment of Interventions to Reduce PM2.5 in a Residence during a Wildfire Event

Increasingly large and frequent wildfires affect air quality even indoors by emitting and dispersing fine/ultrafine particulate matter known to pose health risks to residents. With this health threat, we are working to help the building science community develop simplified tools that may be used to estimate impacts to large numbers of homes based on high-level housing characteristics. In addition to reviewing literature sources, we performed an experiment to evaluate interventions to mitigate degraded indoor air quality. We instrumented one residence for one week during an extreme wildfire event in the Pacific Northwest. Outdoor ambient concentrations of PM2.5 reached historic levels, sustained at over 200 μg/m3 for multiple days. Outdoor and indoor PM2.5 were monitored, and data regarding building characteristics, infiltration, and mechanical system operation were gathered to be consistent with the type of information commonly known for residential energy models. Two conditions were studied: a high-capture minimum efficiency rated value (MERV 13) filter integrated into a central forced air (CFA) system, and a CFA with MERV 13 filtration operating with a portable air cleaner (PAC). With intermittent CFA operation and no PAC, indoor corrected concentrations of PM2.5 reached 280 μg/m3, and indoor/outdoor (I/O) ratios reached a mean of 0.55. The measured I/O ratio was reduced to a mean of 0.22 when both intermittent CFA and the PAC were in operation. Data gathered from the test home were used in a modeling exercise to assess expected I/O ratios from both interventions. The mean modeled I/O ratio for the CFA with an MERV 13 filter was 0.48, and 0.28 when the PAC was added. The model overpredicted the MERV 13 performance and underpredicted the CFA with an MERV 13 filter plus a PAC, though both conditions were predicted within 0.15 standard deviation. The results illustrate the ways that models can be used to estimate indoor PM2.5 concentrations in residences during extreme wildfire smoke events.

63 RADIATION, THERMAL, AND OTHER ENVIRON. POLLUTAN↗
DOE OSTI2024

Review of Technical Photovoltaic Key Performance Indicators and the Importance of Data Quality Routines

Technical key performance indicators (KPIs) are important metrics used to assess and quantitatively summarize various aspects of photovoltaic (PV) systems, including long-term performance, economic viability, and carbon footprint. Herein, a group of experts of the International Energy Agency's Photovoltaic Power Systems Programme Task 13 collect and describ the most important technical KPIs used in the industry. Thereby, a set of best practices for reliably handling PV system data is presented and the impact of data quality and climatic variability on KPI calculation is investigated. Further, the effective use of technical KPIs allows triggering data-driven and informed decisions to optimize PV systems and providing a comprehensive overview of how PV systems operate across different conditions and climates. With the worldwide growth of the PV industry, more companies operate/own PV systems in different regions, where the climatic and seasonal profiles differ. This requires context-aware evaluation of KPIs, or the judicious application of multiple KPIs, to ensure that each asset is evaluated correctly. Beyond that, there is untapped potential in the utilization of KPIs through geospatial mapping and extrapolation of fleet KPIs. This study demonstrates that the uncertainty in KPI estimation is not well understood and depends on data quality, climatic variability, and system configuration.

14 SOLAR ENERGY↗
DOE OSTI2023

UQpy v4.1: Uncertainty quantification with Python

This paper presents the latest improvements introduced in Version 4 of the UQpy, Uncertainty Quantification with Python, library. In the latest version, the code was restructured to conform with the latest Python coding conventions, refactored to simplify previous tightly coupled features, and improve its extensibility and modularity. To improve the robustness of UQpy, software engineering best practices were adopted. A new software development workflow significantly improved collaboration between team members, and continuous integration and automated testing ensured the robustness and reliability of software performance. Continuous deployment of UQpy allowed its automated packaging and distribution in system agnostic format via multiple channels, while a Docker image enables the use of the toolbox regardless of operating system limitations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Cyber-Physical Smart Light Control System Integration with Smart Grid using Zigbee

This paper presents a hardware-in-the-loop cyber-physical system architecture design to monitor and control smart lights connected to the active distribution grid. The architecture uses Zigbee-based (IEEE 802.15.4) wireless sensor networks and publish-subscribe architecture to exchange monitoring and control signals between smart-light actuators (SLAs) and a smart-light central controller (SLCC). Each SLA integrated into a smart light consists of a Zigbee-based endpoint module to send and receive signals to and from the SLCC. The SLCC consists of a Zigbee-based coordinator module, which further exchanges the monitoring and control signals with the active distribution management system over the TCP/IP communication network. The monitoring signals from the SLAs include light status, brightness level, voltage, current, and power data, whereas, the control signals to the SLAs include light intensity, turn ON, turn OFF, standby, and default settings. We have used our existing hardware-in-the-loop (HIL) cyber-physical system (CPS) security SCADA testbed to process signals received from the SLCC and respond suitable control signals based on the smart light schedule requirements, system operation, and active distribution grid dynamic characteristics. We have integrated the proposed cyber-physical smart light control system (CPSLCS) testbed to our existing HIL CPS SCADA testbed. We use the integrated testbed to demonstrate the efficacy of the proposed algorithm by real-time performance and latency between the SLCC and SLAs. The experiments demonstrated significant results by 100% realtime performance and low latency while exchanging data between the SLCC and SLAs.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Comparative Analysis of Inter-Area Oscillations in the US Eastern and Western Interconnections

This paper presents a comparative analysis of interarea oscillations in the US Eastern and Western Interconnections using frequency disturbance data collected from the advanced wide-area Frequency Monitoring Network (FNET/GridEye), enabling us to investigate and compare the oscillation characteristics of both regions. The study analyzes the statistical data from the two interconnections, including total oscillation events, average dominant frequencies, damping ratios, and maximum amplitudes. We also explore the impact of seasonal and daily variations on oscillation occurrences and the influence of different grid topologies and operational practices. The results provide insights into both interconnections' stability and control characteristics, offering valuable information for power system operators to enhance grid stability and oscillation suppression measures.

Fu, Hao [University of Tennessee, Knoxville (UTK)]↗
DOE OSTI2021

Multi Time-scale Imputation aided State Estimation in Distribution System

With the transition to a smart grid, we are witnessing a significant growth in sensor deployments and smart metering infrastructure in the distribution system. However, information from these sensors and meters are typically unevenly sampled at different time-scales and are incomplete. It is critical to effectively aggregate these information sources for situational awareness. In order to reconcile the heterogeneous multi-scale time-series data, we present a multi-task Gaussian process framework. This framework exploits the spatio-temporal correlation across the time-series data to impute data at any desired timescale while providing confidence bounds on the imputations. The value of the imputed data for distribution system operation is illustrated via a matrix completion based state estimation strategy. Results on the IEEE 37 bus distribution system reveals the superior performance of the proposed approach relative to linear interpolation approaches.

Dahale, Shweta↗
DOE OSTI2024

FLEXIBLE POWER TRANSFORMERS TO IMPROVE RESILIENCY OF TRANSMISSION NETWORKS

For decades, transformer flexibility of operation has been limited to adjustable voltage ratio and, in some cases, several ratings with staged cooling. Transformers reconnectable to multiple voltage ratings have been primarily applied as emergency replacements. Other versions of “flexible transformers” were developed for continuous, long-term operation at specific sites, with application limited to large utilities. A new technology that supports today’s power systems adaptability requirements has been developed to provide not only voltage and power rating flexibility, but also an adjustable short-circuit impedance. This last, unique feature allows for a closer match to actual system operational requirements and could be used in the future to enhance resiliency and improve dynamic control of electrical grids. While the solution’s fundamentals have already been introduced in several technical forums, the intention of this article is to focus on the potential benefits of this new type of transformer and share the deployment experience of a full-scale prototype that has been in operation in a major U.S. utility since 2021

flexible transformer, resilient grid, variable lea↗
DOE OSTI2025

Hawaii Threat Brief

The Digital Energy Transformation is redefining how power systems operate, integrating physical infrastructure with digital technologies to enhance efficiency, visibility, and resilience. For islanded and digitally modernizing systems like Hawai‘i’s, this shift presents both new opportunities and evolving challenges in cybersecurity, supply chain assurance, and environmental resilience. This brief provides an overview of critical infrastructure dependencies and systemic risks associated with increasing digital integration. It summarizes recent energy-sector threat activity and case studies that illustrate adversary tactics and supply chain vulnerabilities, and identifies pathways to strengthen resilience.

25 - ENERGY STORAGE↗
DOE OSTI2025

Using X-ray radiography to study oxygen flow in a proton exchange membrane electrolyzer operating under balanced pressure conditions

Of the various water electrolyzer technologies, the proton exchange membrane electrolyzer (PEMWE) is one of the best solutions for producing clean hydrogen without releasing CO 2 . In order to allow for widespread use of clean hydrogen, it is necessary to decrease its cost, which is intrinsically related to system operation. Current PEMWE plants operate in differential mode, directly pressurizing hydrogen and benefiting from thermodynamic compression, which increases overall system efficiency. However, high differential pressure above 30 bar can cause membrane stress, resulting in membrane creeping and failure. Pressurizing the water and operating at balanced pressure allows hydrogen to be produced at higher pressures while preserving the integrity of the membrane and porous layers. Nevertheless, the impact of pressurizing water on PEMWE performance must be better understood to maximize performance under balanced pressure conditions. Here, this study examined the impact of water pressure on two-phase flow. A high-pressure electrolyzer setup was developed to perform operando X-ray radiography and examine oxygen transport with high temporal resolution. The imaging segmentation process, developed to capture bubble properties in the channel, was applied to a specific experiment. The results clearly showed that as pressure increased up to 30 bars, the initial bubbly flow transitioned to slug flow, which led to channel saturation with oxygen. This work demonstrates that two-phase flow in an electrolyzer can be studied using X-ray radiography, which has the advantages of fast measurements and the ability to probe dense materials, such as those required for pressurized electrolyzers.

Balanced high pressure operation↗
DOE OSTI2020

Peak load reduction and load shaping in HVAC and refrigeration systems in commercial buildings by using a novel lightweight dynamic priority-based control strategy

Reducing peak power demand in a building can reduce electricity expenses for the building owner and contribute to the efficiency and reliability of the electrical power grid. For the building owner, reduced expenses come from the reduction or elimination of peak power charges on electricity bills. For the power system operator, reducing peak power demand leads to a more predictable load profile and reduces stress on the electric grid system. Herein we present a computationally inexpensive, dynamic, and retrofit-deployable control strategy to effect peak load reduction and load shaping. The effectiveness of the control strategy is examined in a simulation with 80 air-conditioning units and 40 refrigeration units. The results show that a peak demand reduction of 60 kW can be achieved relative to peak demand in a typical set point–based approach. The proposed strategy was deployed in a gymnasium building with four rooftop HVAC units, where it showed over 15% peak demand (kW) reduction savings while maintaining or lowering energy consumption (in kilowatt-hours) relative to the set point–based thermostat controls.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Synthetic Ancillary Service Generator (SynAS) v1

The balance of demand and supply in the electric power grid is a crucial element to grid reliability. While balancing is typically provided by conventional power plants, with spinning generators, distributed energy resources (DER) and especially electric vehicles (EVs) pose a great potential to provide such service. This project conducted a field demonstration at the Los Angeles Air Force Base (LA-AFB) where a fleet of mixed-use bi-directional EVs were actively participating in the California Independent System Operator (CAISO) market for frequency regulation. While participation in regulation markets is promising, a major drawback in designing control systems and assessing potential revenue is the lack of example frequency regulation signals. This project introduces an open-source dataset for 143 days of four-second regulation data, and the SynAS Python module to synthetically generate frequency regulation signals of arbitrary length.

Black, DouglasR↗
DOE OSTI2022

Evaluation of Joint Cyber/Safety Risk in Nuclear Power Systems

This report presents an analysis of the Emergency Core Cooling System (ECCS) for a generic Boiling Water Reactor (BWR)-4 NPP. The Electric Power Research Institute (EPRI) developed Hazards and Consequences Analysis for Digital Systems (HAZCADS) process is applied to the ECCS and its subsystems to identify unsafe control actions (UCAs) which act as possible cyber events of concern. The analysis is performed for two design basis events: Small-break Loss of Coolant Accident (SLOCA) and general transients (TRANS), such as unintended reactor trip. In previous work, HAZCADS UCAs were combined with other cyber-attack analysis to develop a risk-informed approach; however, this was for a single system. This report explores advanced systems engineering modeling approaches to model the interactions between digital assets across multiple systems which may be targeted by cyber adversaries. The complex and interdependent design of digital systems has the potential to introduce emergent cyber properties that are generally not covered by hazard analyses nor formal nuclear Probabilistic Risk Assessment (PRA). The R&D and supporting analysis presented here explores approaches to predict and manage how interdependent system properties effect risk. To show the potential impact of a successful cyber-attack to formal PRA event tree probabilities, HAZCADS analysis was also used. HAZCADS was also used to model the automatic depressurization system (ADS) automatic actuation. This analysis extended to an integrated system analysis for common-cause failure (CCF). In this aspect, the HAZCADS analysis continued by analyzing plant design details for system connectivity in support of critical plant functions. A dependency matrix was developed to depict the integrated functionality of the interconnected systems. Areas of potential CCF are indicated. Future work could include adversary attack development to show how CCF could be caused, resulting in PRA events. Across the multiple systems that comprise the ECCS, the analysis shows that the change in such probabilities was very different between systems. This indicates that some systems have a larger potential risk impact from successful cyber-attack or digital failure, which indicates a need for these systems to have a higher priority for design and defensive measures. Furthermore, we were able to establish that a risk analysis using any arbitrary threat model establishes an ordering of components with regard to cyber-risk. This ordering can be used to influence the overall system design with an eye to lowering risk, or as a way to understand real-time risk to operational systems based on a current threat landscape. Expert knowledge of both the analysis process and the system being analyzed is required to perform a HAZCADS analysis. The need for a tiered risk analysis is demonstrated by the results of this report.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗