SEARCH · Engineering Papers

Results for “compliance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 631 records · Page 35

All sources NASA NTRS DOE OSTI

NASA NTRS2011

Long-Term International Space Station (ISS) Risk Reduction Activities

As the assembly of the ISS nears completion, it is worthwhile to step back and review some of the actions pursued by the Program in recent years to reduce risk and enhance the safety and health of ISS crewmembers, visitors, and space flight participants. While the initial ISS requirements and design were intended to provide the best practicable levels of safety, it is always possible to further reduce risk given the determination, commitment, and resources to do so. The following is a summary of some of the steps taken by the ISS Program Manager, by our International Partners, by hardware and software designers, by operational specialists, and by safety personnel to continuously enhance the safety of the ISS, and to reduce risk to all crewmembers. While years of work went into the development of ISS requirements, there are many things associated with risk reduction in a Program like the ISS that can only be learned through actual operational experience. These risk reduction activities can be divided into roughly three categories: Areas that were initially noncompliant which have subsequently been brought into compliance or near compliance (i.e., Micrometeoroid and Orbital Debris [MMOD] protection, acoustics) Areas where initial design requirements were eventually considered inadequate and were subsequently augmented (i.e., Toxicity hazard level-4 materials, emergency procedures, emergency equipment, control of drag-throughs) Areas where risks were initially underestimated, and have subsequently been addressed through additional mitigation (i.e., Extravehicular Activity [EVA] sharp edges, plasma shock hazards). Due to the hard work and cooperation of many parties working together across the span of more than a decade, the ISS is now a safer and healthier environment for our crew, in many cases exceeding the risk reduction targets inherent in the intent of the original design. It will provide a safe and stable platform for utilization and discovery for years to come.

Forroci, Michael P.↗

NASA NTRS2011

Nutrition Coupled with High-Load Traditional or Low-Load Blood Flow Restricted Exercise During Human Limb Suspension

High-load resistance exercise (HRE) and low-load blood flow restricted (BFR) exercise have demonstrated efficacy for attenuating unloading related muscle atrophy and dysfunction. In recreational exercisers, protein consumption immediately before and/or after exercise has been shown to increase the skeletal muscle anabolic response to resistance training. PURPOSE: To compare the skeletal muscle adaptations when chocolate milk intake was coupled with HRE or low-load BFR exercise [3 d/wk] during simulated lower limb weightlessness. METHODS: Eleven subjects were counterbalanced [based on age and gender] to HRE (31 +/- 14 yr, 170 +/- 13 cm, 71 +/- 18 kg, 2M/3W) or low-load BFR exercise (31 +/- 12 yr, 169 +/- 13 cm, 66 +/- 14 kg, 2M/4W) during 30 days of unilateral lower limb suspension (ULLS). Both HRE and BFR completed 3 sets of single leg press and calf raise exercise during ULLS. BFR exercise intensity was 20% of repetition maximum (1RM) with a cuff inflation pressure of 1.3 systolic blood pressure (143 4 mmHg). Cuff pressure was maintained during all 3 sets including rest intervals (90s). HRE intensity was 75% 1RM and was performed without cuff inflation. Immediately (<10 min) before and after exercise 8 fl oz of chocolate milk (150 kcal, 2.5g total fat, 22g total carbohydrate, 8g protein) was consumed to optimize acute exercise responses in favor of muscle anabolism. ULLS analog compliance was assessed from leg skin temperature recordings and plantar accelerometry. Muscle cross-sectional area (CSA) for knee extensor and plantar flexor muscle groups were determined from analysis of magnetic resonance images using ImageJ software. 1RM strength for leg press and calf raise was assessed on the Agaton exercise system. Muscular endurance during leg press and calf raise was evaluated from the maximal number of repetitions performed to volitional fatigue using 40% of pre-ULLS 1RM. RESULTS: Steps detected by plantar acceleometry declined by 98.9% during ULLS relative to an ambulatory control period. Average skin temperature of the unloaded calf declined from 27.4 C to 26.8 C (-2.1%), while there was a slight increase (+1.1%) in skin temperature in the loaded calf (27.6 C to 27.9 C). Collectively, these measures indicate strong subject compliance with the ULLS analog. Unloaded limb work performed during leg press (1514 +/- 334 vs. 576 +/- 103) and calf raise (2886 +/- 508 vs. 1233 +/- 153) exercises sessions was greater in HRE vs. BFR, respectively. Leg press training loads were 44 +/- 7 kg in HRE compared to 11 +/- 1 kg in BFR. Similarly, calf raise training loads were 81 +/- 11 kg in HRE and 16 +/- 1 kg in BFR. Pre to post-ULLS training adaptations in the unloaded leg are shown in the table. CONCLUSION: The preliminary results of this investigation suggest when HRE is optimized for muscle anabolism during unloading muscle size and strength are preserved (or enhanced) at the expense of muscle endurance. In contrast, when BFR exercise is optimized for muscle anabolism during unloading muscle endurance is preserved (or enhanced) at the expense of muscle size and strength

Hackney, K. J.↗

NASA NTRS2003

Compliant Gripper for a Robotic Manipulator

A figure depicts a prototype of a robotic-manipulator gripping device that includes two passive compliant fingers, suitable for picking up and manipulating objects that have irregular shapes and/or that are, themselves, compliant. The main advantage offered by this device over other robotic-manipulator gripping devices is simplicity: Because of the compliance of the fingers, force-feedback control of the fingers is not necessary for gripping objects of a variety of sizes, shapes, textures, and degrees of compliance. Examples of objects that can be manipulated include small stones, articles of clothing, and parts of plants.

Cipra, Raymond↗

NASA NTRS2003

Silicon Membrane Mirrors with Electrostatic Shape Actuators

Efforts are under way to develop deformable mirrors equipped with microscopic electrostatic actuators that would be used to maintain their reflective surfaces in precise shapes required for their intended applications. Unlike actuators that depend on properties of materials (e.g., piezoelectric and electrostrictive actuators), electrostatic actuators are effective over a wide temperature range. A mirror of the present type would be denoted a MEMSDM (for microelectromechanical system deformable mirror). The reflective surface of such a mirror would be formed on a single-crystal silicon membrane that would be attached by posts to a silicon actuator membrane that would, in turn, be attached by posts to a rigid silicon base (see figure). The actuator membrane would serve as the upper electrode of a capacitor. Multiple lower electrodes, each occupying a conveniently small fraction of the total area, would be formed on an electrically insulating oxide layer on the base, thereby defining a multiplicity of actuator pixels. The actuator membrane would be corrugated in a pattern that would impart mechanical compliance needed for relaxation of operational and fabrication-induced stresses and to minimize the degree of nonlinearity of deformations. The compliance afforded by the corrugations would also help to minimize the undesired coupling of deformations between adjacent pixels (a practical goal being to keep the influence coefficient between adjacent pixels below 10 percent).

Yang, Eui-Hyeok↗

NASA NTRS2012

Evaluation of Delamination Growth Characterization Methods Under Mode I Fatigue Loading

Reliable delamination characterization data for laminated composites are needed for input to analytical models of structures to predict delamination. The double-cantilevered beam (DCB) specimen is used with laminated composites to measure fracture toughness, G(sub Ic), delamination onset strain energy release rate, and growth rate data under cyclic loading. In the current study, DCB specimens of IM7/8552 graphite/epoxy supplied by two different manufacturers were tested in static and fatigue to compare the measured characterization data from the two sources, and to evaluate a proposed ASTM standard for generating Paris Law equations. Static results were used to generate compliance calibration constants for the fatigue data, and a delamination resistance curve, G(sub IR), which was used to determine the effects of fiber-bridging on delamination growth. Specimens were tested in fatigue at a cyclic G(sub Imax) level equal to 50, 40 or 30% of G(sub Ic), to determine a delamination onset curve and delamination growth rate. The delamination onset curve equations had similar exponents and the same trends. Delamination growth rate was calculated by fitting a Paris Law to the da/dN versus G(sub Imax) data. Both a 2-point and a 7-point data reduction method were used and the Paris Law equations were compared. To determine the effects of fiber-bridging, growth rate results were normalized by the delamination resistance curve for each material and compared to the non-normalized results. Paris Law exponents were found to decrease by 31% to 37% due to normalizing the growth data. Normalizing the data also greatly reduced the amount of scatter between the different specimens. Visual data records from the fatigue testing were used to calculate individual compliance calibration constants from the fatigue data for some of the specimens. The resulting da/dN versus G(sub Imax) plots showed much improved repeatability between specimens. Gretchen

Murri, Gretchen B.↗

NASA NTRS2012

Radiation-Tolerant DC-DC Converters

A document discusses power converters suitable for space use that meet the DSCC MIL-PRF-38534 Appendix G radiation hardness level P classification. A method for qualifying commercially produced electronic parts for DC-DC converters per the Defense Supply Center Columbus (DSCC) radiation hardened assurance requirements was developed. Development and compliance testing of standard hybrid converters suitable for space use were completed for missions with total dose radiation requirements of up to 30 kRad. This innovation provides the same overall performance as standard hybrid converters, but includes assurance of radiation- tolerant design through components and design compliance testing. This availability of design-certified radiation-tolerant converters can significantly reduce total cost and delivery time for power converters for space applications that fit the appropriate DSCC classification (30 kRad).

Skutt, Glenn↗

NASA NTRS2012

Varying Levels of Automation on UAS Operator Responses to Traffic Resolution Advisories in Civil Airspace

Continuing demand for the use of Unmanned Aircraft Systems (UAS) has put increasing pressure on operations in civil airspace. The need to fly UAS in the National Airspace System (NAS) in order to perform missions vital to national security and defense, emergency management, and science is increasing at a rapid pace. In order to ensure safe operations in the NAS, operators of unmanned aircraft, like those of manned aircraft, may be required to maintain separation assurance and avoid loss of separation with other aircraft while performing their mission tasks. This experiment investigated the effects of varying levels of automation on UAS operator performance and workload while responding to conflict resolution instructions provided by the Tactical Collision Avoidance System II (TCAS II) during a UAS mission in high-density airspace. The purpose of this study was not to investigate the safety of using TCAS II on UAS, but rather to examine the effect of automation on the ability of operators to respond to traffic collision alerts. Six licensed pilots were recruited to act as UAS operators for this study. Operators were instructed to follow a specified mission flight path, while maintaining radio contact with Air Traffic Control and responding to TCAS II resolution advisories. Operators flew four, 45 minute, experimental missions with four different levels of automation: Manual, Knobs, Management by Exception, and Fully Automated. All missions included TCAS II Resolution Advisories (RAs) that required operator attention and rerouting. Operator compliance and reaction time to RAs was measured, and post-run NASA-TLX ratings were collected to measure workload. Results showed significantly higher compliance rates, faster responses to TCAS II alerts, as well as less preemptive operator actions when higher levels of automation are implemented. Physical and Temporal ratings of workload were significantly higher in the Manual condition than in the Management by Exception and Fully Automated conditions.

Kenny, Caitlin↗

NASA NTRS2013

Characterizing Facesheet/Core Disbonding in Honeycomb Core Sandwich Structure

Results are presented from an experimental investigation into facesheet core disbonding in carbon fiber reinforced plastic/Nomex honeycomb sandwich structures using a Single Cantilever Beam test. Specimens with three, six and twelve-ply facesheets were tested. Specimens with different honeycomb cores consisting of four different cell sizes were also tested, in addition to specimens with three different widths. Three different data reduction methods were employed for computing apparent fracture toughness values from the test data, namely an area method, a compliance calibration technique and a modified beam theory method. The compliance calibration and modified beam theory approaches yielded comparable apparent fracture toughness values, which were generally lower than those computed using the area method. Disbonding in the three-ply facesheet specimens took place at the facesheet/core interface and yielded the lowest apparent fracture toughness values. Disbonding in the six and twelve-ply facesheet specimens took place within the core, near to the facesheet/core interface. Specimen width was not found to have a significant effect on apparent fracture toughness. The amount of scatter in the apparent fracture toughness data was found to increase with honeycomb core cell size.

Rinker, Martin↗

NASA NTRS2013

Extreme low frequency acoustic measurement system

The present invention is an extremely low frequency (ELF) microphone and acoustic measurement system capable of infrasound detection in a portable and easily deployable form factor. In one embodiment of the invention, an extremely low frequency electret microphone comprises a membrane, a backplate, and a backchamber. The backchamber is sealed to allow substantially no air exchange between the backchamber and outside the microphone. Compliance of the membrane may be less than ambient air compliance. The backplate may define a plurality of holes and a slot may be defined between an outer diameter of the backplate and an inner wall of the microphone. The locations and sizes of the holes, the size of the slot, and the volume of the backchamber may be selected such that membrane motion is substantially critically damped.

Shams, Qamar A.↗

NASA NTRS2013

Evolution of International Space Station Program Safety Review Processes and Tools

The International Space Station Program at NASA is constantly seeking to improve the processes and systems that support safe space operations. To that end, the ISS Program decided to upgrade their Safety and Hazard data systems with 3 goals: make safety and hazard data more accessible; better support the interconnection of different types of safety data; and increase the efficiency (and compliance) of safety-related processes. These goals are accomplished by moving data into a web-based structured data system that includes strong process support and supports integration with other information systems. Along with the data systems, ISS is evolving its submission requirements and safety process requirements to support the improved model. In contrast to existing operations (where paper processes and electronic file repositories are used for safety data management) the web-based solution provides the program with dramatically faster access to records, the ability to search for and reference specific data within records, reduced workload for hazard updates and approval, and process support including digital signatures and controlled record workflow. In addition, integration with other key data systems provides assistance with assessments of flight readiness, more efficient review and approval of operational controls and better tracking of international safety certifications. This approach will also provide new opportunities to streamline the sharing of data with ISS international partners while maintaining compliance with applicable laws and respecting restrictions on proprietary data. One goal of this paper is to outline the approach taken by the ISS Progrm to determine requirements for the new system and to devise a practical and efficient implementation strategy. From conception through implementation, ISS and NASA partners utilized a user-centered software development approach focused on user research and iterative design methods. The user-centered approach used on the new ISS hazard system utilized focused user research and iterative design methods employed by the Human Computer Interaction Group at NASA Ames Research Center. Particularly, the approach emphasized the reduction of workload associated with document and data management activities so more resources can be allocated to the operational use of data in problem solving, safety analysis, and recurrence control. The methods and techniques used to understand existing processes and systems, to recognize opportunities for improvement, and to design and review improvements are described with the intent that similar techniques can be employed elsewhere in safety operations. A second goal of this paper is to provide and overview of the web-based data system implemented by ISS. The software selected for the ISS hazard systemMission Assurance System (MAS)is a NASA-customized vairant of the open source software project Bugzilla. The origin and history of MAS as a NASA software project and the rationale for (and advantages of) using open-source software are documented elsewhere (Green, et al., 2009).

Ratterman, Christian D.↗

NASA NTRS2013

JWST Integrated Science Instrument Module Alignment Optimization Tool

During cryogenic vacuum testing of the James Webb Space Telescope (JWST) Integrated Science Instrument Module (ISIM), the global alignment of the ISIM with respect to the designed interface of the JWST optical telescope element (OTE) will be measured through a series of optical characterization tests. These tests will determine the locations and orientations of the JWST science instrument projected focal surfaces and entrance pupils with respect to their corresponding OTE optical interfaces. If any optical performance non-compliances are identified, the ISIM will be adjusted to improve its performance. In order to understand how to manipulate the ISIM's degrees of freedom properly and to prepare for the ISIM flight model testing, a series of optical-mechanical analyses have been completed to develop and identify the best approaches for bringing a non-compliant ISIM element into compliance. In order for JWST to meet its observatory-level optical requirements and ambitious science goals, the ISIM element has to meet approximately 150 separate optical requirements. Successfully achieving many of those optical requirements depends on the proper alignment of the ISIM element with respect to the OTE. To verify that the ISIM element will meet its optical requirements, a series of cryogenic vacuum tests will be conducted with an OTE Simulator (OSIM). An optical Ray Trace and Geometry Model tool was developed to help solve the multi-dimensional alignment problem. The tool allows the user to determine how best to adjust the alignment of the JWST ISIM with respect to the ideal telescope interfaces so that the approximately 150 ISIM optical performance requirements can be satisfied. This capability has not existed previously.

Bos, Brent↗

NASA NTRS2014

Orbital Debris Mitigation

Policies on limiting orbital debris are found throughout the US Government, many foreign space agencies, and as adopted guidelines in the United Nations. The underlying purpose of these policies is to ensure the environment remains safe for the operation of robotic and human spacecraft in near‐ Earth orbit. For this reason, it is important to consider orbital debris mitigation during the design of all space vehicles. Documenting compliance with the debris mitigation guidelines occurs after the vehicle has already been designed and fabricated for many CubeSats, whereas larger satellites are evaluated throughout the design process. This paper will provide a brief explanation of the US Government Orbital Debris Mitigation Standard Practices, a discussion of international guidelines, as well as NASA's process for compliance evaluation. In addition, it will discuss the educational value of considering orbital debris mitigation requirements as a part of student built satellite design.

Kelley, R. L.↗

NASA NTRS2014

IVGEN Post Flight Analysis

The Intravenous Fluid Generation (IVGEN) Experiment was a technology demonstration experiment that purified ISS potable water, mixed it with salt, and transferred it through a sterilizing filter. On-orbit performance was verified as appropriate and two 1.5 l bags of normal saline solution were returned to earth for post-flight testing by a FDA certified laboratory for compliance with United States Pharmacopiea (USP) standards. Salt concentration deviated from required values and an analysis identified probable causes. Current efforts are focused on Total Organic Content (TOC) testing, and shelf life.The Intravenous Fluid Generation (IVGEN) Experiment demonstrated the purification of ISS potable water, the mixing of the purified water with sodium chloride, and sterilization of the solution via membrane filtration. On-orbit performance was monitored where feasible and two 1.5-liter bags of normal saline solution were returned to earth for post-flight testing by a FDA-registered laboratory for compliance with United States Pharmacopeia (USP)standards [1]. Current efforts have been focused on challenge testing with identified [2] impurities (total organic-carbon), and shelf life testing. The challenge testing flowed known concentrations of contaminants through the IVGEN deionizing cartridge and membrane filters to test their effectiveness. One finding was that the filters and DI-resin themselves contribute to the contaminant load during initial startup, suggesting that the first 100 ml of fluid be discarded. Shelf life testing is ongoing and involves periodic testing of stored DI cartridges and membrane filters that are capped and sealed in hermetic packages. The testing is conducted at six month intervals measuring conductivity and endotoxins in the effluent. Currently, the packaging technique has been successfully demonstrated for one year of storage testing. The USP standards specifies that the TOC be conducted at point of generation as opposed to point of consumption. Samples were generated and shipped to an FDA facility however, testing determined that the samples failed the TOC specification with most likely due to leaching from the sample container. Shelf life testing is examining packaging techniques and periodic testing of samples of DI cartridges that are capped and sealed in hermetic packages. Periodic testing of the purified water output will be conducted at six month intervals.

microgravity applications↗

NASA NTRS2014

Mars Sample Return Using Commercial Capabilities: Mission Architecture Overview

Mars Sample Return (MSR) is the highest priority science mission for the next decade as recommended by the recent Decadal Survey of Planetary Science. This paper presents an overview of a feasibility study for an MSR mission. The objective of the study was to determine whether emerging commercial capabilities can be used to reduce the number of mission systems and launches required to return the samples, with the goal of reducing mission cost. We report the feasibility of a complete and closed MSR mission design using the following scenario that covers three synodic launch opportunities, beginning with the 2022 opportunity: A Falcon Heavy injects a SpaceX Red Dragon capsule and trunk onto a Trans Mars Injection (TMI) trajectory. The capsule is modified to carry all the hardware needed to return samples collected on Mars including a Mars Ascent Vehicle (MAV), an Earth Return Vehicle (ERV), and hardware to transfer a sample collected in a previously landed rover mission to the ERV. The Red Dragon descends to land on the surface of Mars using Super Sonic Retro Propulsion (SSRP). After previously collected samples are transferred to the ERV, the single-stage MAV launches the ERV from the surface of Mars. The MAV uses a storable liquid bi-propellant propulsion system to deliver the ERV to a Mars phasing orbit. After a brief phasing period, the ERV, which also uses a storable bi-propellant system, performs a Trans Earth Injection (TEI) burn. Upon arrival at Earth, the ERV performs Earth and lunar swing-bys and is placed into a lunar trailing circular orbit - an Earth orbit, at lunar distance. A later mission, using Dragon and launched by a Falcon Heavy, performs a rendezvous with the ERV in the lunar trailing orbit, retrieves the sample container and breaks the chain of contact with Mars by transferring the sample into a sterile and secure container. With the sample contained, the retrieving spacecraft makes a controlled Earth re-entry preventing any unintended release of pristine martian materials into the Earth's biosphere. The analysis methods employed standard and specialized aerospace engineering tools. Mission system elements were analyzed with either direct techniques or by using parametric mass estimating relationships (MERs). The architecture was iterated until overall mission convergence was achieved on at least one path. Subsystems analyzed in this study include support structures, power system, nose fairing, thermal insulation, actuation devices, MAV exhaust venting, and GN&C. Best practice application of loads, mass growth contingencies, and resource margins were used. For Falcon Heavy capabilities and Dragon subsystems we utilized publically available data from SpaceX, published analyses from other sources, as well as our own engineering and aerodynamic estimates. Earth Launch mass is under 11 mt, which is within the estimated capability of a Falcon Heavy, with margin. Total entry masses between 7 and 10 mt were considered with closure occurring between 9 and 10 mt. Propellant mass fractions for each major phase of the EDL - Entry, Terminal Descent, and Hazard Avoidance - have been derived. An assessment of the effect of the entry conditions on the thermal protection system (TPS), currently in use for Dragon missions, shows no significant stressors. A useful payload mass of 2.0 mt is provided and includes mass growth allowances for the MAV, the ERV, and mission unique equipment. We also report options for the MAV and ERV, including propulsion systems, crewed versus robotic retrieval mission, as well as direct Earth entry. International planetary protection policies as well as verifiable means of compliance will have a large impact on any MSR mission design. We identify areas within our architecture where such impacts occur. We also describe preliminary compliance measures that will be the subject of future work. This work shows that emerging commercial capabilities as well as new methodologies can be used to efficiently support an important planetary science objective. The work also has applications for human exploration missions that use propulsive EDL techniques

Red Dragon↗

NASA NTRS2014

Assuring Ground-Based Detect and Avoid for UAS Operations

One of the goals of the Marginal Ice Zones Observations and Processes Experiment (MIZOPEX) NASA Earth science mission was to show the operational capabilities of Unmanned Aircraft Systems (UAS) when deployed on challenging missions, in difficult environments. Given the extreme conditions of the Arctic environment where MIZOPEX measurements were required, the mission opted to use a radar to provide a ground-based detect-and-avoid (GBDAA) capability as an alternate means of compliance (AMOC) with the see-and-avoid federal aviation regulation. This paper describes how GBDAA safety assurance was provided by interpreting and applying the guidelines in the national policy for UAS operational approval. In particular, we describe how we formulated the appropriate safety goals, defined the processes and procedures for system safety, identified and assembled the relevant safety verification evidence, and created an operational safety case in compliance with Federal Aviation Administration (FAA) requirements. To the best of our knowledge, the safety case, which was ultimately approved by the FAA, is the first successful example of non-military UAS operations using GBDAA in the U.S. National Airspace System (NAS), and, therefore, the first nonmilitary application of the safety case concept in this context.

Detect-and-Avoid↗

NASA NTRS2014

IT Security Support for the Spaceport Command Control System Development

My job title is IT Security support for the Spaceport Command & Control System Development. As a cyber‐security analyst it is my job to ensure NASA's information stays safe from cyber threats, such as, viruses, malware and denial-of-service attacks by establishing and enforcing system access controls. Security is very important in the world of technology and it is used everywhere from personal computers to giant networks ran by Government agencies worldwide. Without constant monitoring analysis, businesses, public organizations and government agencies are vulnerable to potential harmful infiltration of their computer information system. It is my responsibility to ensure authorized access by examining improper access, reporting violations, revoke access, monitor information request by new programming and recommend improvements. My department oversees the Launch Control System and networks. An audit will be conducted for the LCS based on compliance with the Federal Information Security Management Act (FISMA) and The National Institute of Standards and Technology (NIST). I recently finished analyzing the SANS top 20 critical controls to give cost effective recommendations on various software and hardware products for compliance. Upon my completion of this internship, I will have successfully completed my duties as well as gain knowledge that will be helpful to my career in the future as a Cyber Security Analyst.

IT Security↗

NASA NTRS2015

Developing Probabilistic Safety Performance Margins for Unknown and Underappreciated Risks

Probabilistic safety requirements currently formulated or proposed for space systems, nuclear reactor systems, nuclear weapon systems, and other types of systems that have a low-probability potential for high-consequence accidents depend on showing that the probability of such accidents is below a specified safety threshold or goal. Verification of compliance depends heavily upon synthetic modeling techniques such as PRA. To determine whether or not a system meets its probabilistic requirements, it is necessary to consider whether there are significant risks that are not fully considered in the PRA either because they are not known at the time or because their importance is not fully understood. The ultimate objective is to establish a reasonable margin to account for the difference between known risks and actual risks in attempting to validate compliance with a probabilistic safety threshold or goal. In this paper, we examine data accumulated over the past 60 years from the space program, from nuclear reactor experience, from aircraft systems, and from human reliability experience to formulate guidelines for estimating probabilistic margins to account for risks that are initially unknown or underappreciated. The formulation includes a review of the safety literature to identify the principal causes of such risks.

Safety Performance Margin↗

NASA NTRS2016

Systems Engineering and Management Applications of ISO 9001:2015 for Government

The manufacturing segment of the business world is busy assessing the impact of ISO 9001:2015, and updating their management systems to meet the required compliance date. What does the new revision mean for government agencies that deliver large engineering projects rather than mass production? In fact, the standard, especially the new revision, can be used quite readily for government agencies, or applied to specific projects, once it is understood in terms of the similarities with systems engineering and project management. From there it can be extrapolated to "mission realization" systems, and a Quality Management System (QMS) is a logical result that can bring order to processes and systems that likely already exist in some fashion. ISO 9001:2015 is less product-oriented than previous versions. It can be more broadly applied to public organizations as well as private; and to services (missions) as well as products. The emphasis on risk management in the revised standard provides the needed balance for weighing decisions with respect to cost, schedule, technical, safety, and regulatory compliance; so if this is not part of agency governance already, this is a good place to start, especially for large engineering projects. The Systems Engineering standard used for this analysis is from NASA's NPR 7123.1 NASA Systems Engineering Processes and Requirements; however, those who are more familiar with ISO/IEC 26702 Systems Engineering-application and management of the systems engineering process, or SAE/EIA 632 Processes for Engineering a System will also recognize the similarities. In reality, the QMS outlined by ISO 9001 reinforces the systems engineering processes, and serves to ensure that they are adequately implemented, although most of the ISO 9001 literature emphasizes the production and process aspects of the standard. Rather than beginning with ISO 9001and getting lost in the vocabulary, it is useful to begin with the systems engineering lifecycle. Identification of stakeholder expectations, identifying solutions, creating specific product or service designs, production of the product or service, delivery to the public, and the associated management, planning, and control processes, are a familiar place to begin thinking of the overall system of identifying, designing, and competing a project or mission. Lining up this lifecycle with the ISO requirements (see Figure 1) illustrates how a quality management system is concerned with the same processes, and provides a governance and assurance function. If implemented properly, there are cost savings resulting from less rework, repair, reprocessing, failures, misplaced documents, and similar types of deficiencies1. Starting with an organization's systems engineering processes allows the organization to use their own terminology for a QMS plan, and tailor the plan to their own project or organization, so that it is more easily developed, understood, and implemented.

Shepherd, Christena C.↗