Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “risk”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 739 records · Page 41

Trial Implementation of the High-Impact, Low-Frequency Power Grid Event Risk Framework to Support Informed Decision-Making

In 2015, Pacific Northwest National Laboratory (PNNL) developed a multi-hazard risk-assessment framework for modeling high-impact, low-frequency (HILF) power grid events to support risk-informed decisions for power grid management and emergency planning. The identified framework elements are based on a systematic and comprehensive characterization of hazards to the level of detail required for modeling risk. In 2016, PNNL performed a trial implementation of the framework for a single hazard category and a set of key power grid asset types as a way to test the framework. A specific realization of a HILF event is referred to as an initiating event, or initiator. An initiating event is the manifestation of a hazard, and can be, for example, an earthquake of specified magnitude at a specified epicenter. Other examples of HILF events include geomagnetic disturbances and pandemics. For this test implementation, grid assets of a benchmark power system transmission network were assigned proxy geographical coordinates associated with Washington State locations; and real-world seismic hazard information was used for those locations. Based on the fragility of the grid assets to events of different severities, the set of possible failure scenarios (i.e., combinations of different asset failures) and their associated probabilities were determined, and recovery of grid assets and restoration of the network were considered. These combinations of failures and their subsequent recovery constitute a HILF event sequence that results in a given level of consequence, such as loss of power over a given geographic area for a given duration. The concurrent quantitative consideration of event probabilities and event consequences characterizes a risk model. For HILF event sequences, risk was expressed as expected unserved energy per year. This implementation demonstrates the feasibility and value of using the HILF event risk framework despite some of the identified challenges. This report discusses this trial implementation and presents risk results and insights from the implementation.

Veeramany, Arun↗

Risk-informed autonomous adaptive cyber controllers

Technology related to risk-informed autonomous adaptive cyber controllers is disclosed. In one example of the disclosed technology, a method includes generating probabilities of a cyber-attack occurring along an attack surface of a network. The probabilities can be generated using sensor and operational data of a network as inputs to an attack graph. The risk scores can be determined using a plurality of fault trees and the generated probabilities from the attack graph. The respective risk scores can correspond to respective nodes of an event tree. The event tree and the determined risk scores can be used to determine risk estimates for a plurality of configurations of the network. The risk estimates for the plurality of configurations of the network can be used to reconfigure the network to reduce a risk from the cyber-attack.

Veeramany, Arun↗

Risk Model for EM Decision Support Toolsets

The Government Office of Accountability (GAO) has published several reports identifying the need for the Department of Energy (DOE) Office of Environmental Management (EM) to address mounting costs for DoE's cleanup program. DOEEM could greatly benefit from independent decision tool-sets/models that would allow them to evaluate options and inform business decision at the enterprise level considering site-specific life cycle costs and system plans. Program goals: Develop a tool-set that enables EM to independently evaluate alternatives, assess outcomes from different contracting strategies, and inform critical decisions for the enterprise. Project goals: Adaption of a Risk Model for integration with complimentary tool-sets for project level decision making. Operational Events: Discrete event model that evaluates operational variables (e.g. capacity, throughput, maintenance constraints) and identify bottlenecks. Identifying and Bounding Project Risk: Identify risks that impact confidence in meeting goals (e.g. production). Life cycle Cost: Evaluate impacts of staffing levels, inventory, and capital investments on life cycle costs. Methods and approach: Monte Carlo Analysis is being executed to generate results: Input derives from Risk Register Data; Tied to Projected and Target Schedules; Incorporates float duration within the model. Assumes associated risk mitigation actions being completed within a timeline of five fiscal years. Metrics include: Confidence in Meeting Production Goal; Confidence in Safety Standards; Confidence in Continuous Operation; Other Metrics can be added as appropriate regarding specific site needs. The adapted risk model can be used as a stand alone decision tool or can be integrated complementary tool-sets (i.e. process and cost models) for project-specific decisions. These support tool-sets can then be integrated with others for site- and complex- level evaluations. Future work includes designing an adaptable and modular framework that would allow integration of multiple tool-sets for holistic and/or targeted evaluation of alternative strategies for decision making that could lead to risk and cost reduction across the enterprise.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Panel Session 132: Risk-Informed Approach for Decision Making in WM, D and D and SNF Management: Reasonable Assurance for Safety

Mr. Larry Camper organized a panel of experts to discuss approaches to better make risk-informed decisions in waste management, decommissioning, and the management of Spent Nuclear Fuel (SNF). The audience heard the perspectives from four panelists that addressed issues ranging from the technical basis used to make risk-informed decisions to for developing cleanup criteria and promulgating regulations and safety standards both domestically and abroad. A summary of each of the presentations given by the panelists is provided herein. This WMS BOD featured panel focused on the Risk-Informed Approach for Decision Making in WM, D and D and SNF Management and the Reasonable Assurance for Safety. The panelists addressed and discussed with the audience different approaches used for decision-making, summarizing ongoing probabilistic vs. deterministic approaches, including IAEA graded approach, and discussed policies/approaches to achieve reasonable assurance for safety rather than using absolute assurance. Panelists with presentations: Risk-Informed Decision Making - More than a Motto? (Paul Black); NRC Staff Perspective on Risk-Informed Approach and Reasonable Safety Assurance in D and D and LLW (Rateb (Boby) Abu Eid); Risk-Informed Decision-Making and Illustrative National Academies Studies (Charles Ferguson); IAEA's Revised Safety Guidance on Remediation (Michelle Roberts); NDA Radioactive Waste Strategy - A Risk Informed Approach (James McKinney)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Extreme Risk Mitigation in Reinforcement Learning using Extreme Value Theory

Risk-sensitive reinforcement learning (RL) has garnered significant attention in recent years due to the growing interest in deploying RL agents in real-world scenarios. A critical aspect of risk awareness involves modelling highly rare risk events (rewards) that could potentially lead to catastrophic outcomes. These infrequent occurrences present a formidable challenge for data-driven methods aiming to capture such risky events accurately. While risk-aware RL techniques do exist, they suffer from high variance estimation due to the inherent data scarcity. Our work proposes to enhance the resilience of RL agents when faced with very rare and risky events by focusing on refining the predictions of the extreme values predicted by the state-action value distribution. To achieve this, we formulate the extreme values of the state-action value function distribution as parameterized distributions, drawing inspiration from the principles of extreme value theory (EVT). We propose an extreme value theory based actor-critic approach, namely, Extreme Valued Actor-Critic (EVAC) which effectively addresses the issue of infrequent occurrence by leveraging EVT-based parameterization. Importantly, we theoretically demonstrate the advantages of employing these parameterized distributions in contrast to other risk-averse algorithms. Our evaluations show that the proposed method outperforms other risk averse RL algorithms on a diverse range of benchmark tasks, each encompassing distinct risk scenarios.

Wang, Yu↗

Hungary 908 Event - Risk Based Graded Approach to ITM

This presentation, Risk-Based, Graded Approach to Insider Threat Mitigation: Human Measures, introduces a structured framework for managing insider threat risk using internationally recognized guidance from the International Atomic Energy Agency (IAEA) Nuclear Security Series No. 8-G (Rev. 1) and the Joint Statement on Mitigating Insider Threats (INFCIRC/908). The presentation emphasizes that effective insider threat mitigation (ITM) depends on both positional controls, which manage inherent risk based on access, authority, and knowledge, and human measures, which address residual risk reflected in behavior, motivation, and reliability. Using a risk-informed and graded approach, the presentation outlines methods for identifying and prioritizing high-risk positions, applying layered organizational controls, and integrating human reliability mechanisms such as the Behavior Observation Program (BOP), Fitness-for-Duty (FFD) evaluations, Employee Assistance Programs (EAP), and Nuclear Security Culture (NSC). The human-focused portion examines behavioral and organizational indicators of opportunity, vulnerability, motivation, and crisis, demonstrating how early detection, deterrence, and response can prevent insider events. The session concludes with a case review of the Millstone Nuclear Power Station incident involving engineer George Galatis. The case illustrates how weak leadership and a poor safety culture can create conditions for failure and how a comprehensive ITM framework could have altered the outcome. The objective of this presentation is to help practitioners apply a risk-based, graded philosophy to human factors and promote a culture of accountability, communication, and resilience within nuclear organizations.

99 - GENERAL AND MISCELLANEOUS↗

A primal–dual algorithm for risk minimization

In this paper, we develop an algorithm to efficiently solve risk-averse optimization problems posed in reflexive Banach space. Such problems often arise in many practical applications as, e.g., optimization problems constrained by partial differential equations with uncertain inputs. Unfortunately, for many popular risk models including the coherent risk measures, the resulting risk-averse objective function is nonsmooth. Here, this lack of differentiability complicates the numerical approximation of the objective function as well as the numerical solution of the optimization problem. To address these challenges, we propose a primal–dual algorithm for solving large-scale nonsmooth risk-averse optimization problems. This algorithm is motivated by the classical method of multipliers and by epigraphical regularization of risk measures. As a result, the algorithm solves a sequence of smooth optimization problems using derivative-based methods. We prove convergence of the algorithm even when the subproblems are solved inexactly and conclude with numerical examples demonstrating the efficiency of our method.

97 MATHEMATICS AND COMPUTING↗

First-of-a-Kind Risk-Informed Digital Twin for Operational Decision Making

A digital twin (DT) is a digital model or a collection of models of a physical entity. DTs in the nuclear arena can be used from plant design through decommissioning. Decisions are typically a priori or made offline. Risk-informed decision making is identifying what can go wrong, its frequency, and the consequences of its failure. Ideally risk-informed decision making reflects the current state of the plant and provides a decision in real time. Traditionally, probabilistic risk assessments (PRAs) evaluate the failures of safety systems, the risk of core damage, and the offsite dose as the consequence. However, this DT evaluates the decisions on the control side rather than the protection side. It uses the same risk methods to probabilistically inform the decision-making process but in a different way. Rather than evaluating the risk of core damage, this DT evaluates the likelihood of avoiding a trip set point while maintaining plant safety. Performance-based assessments are identified via its probabilistic evaluation of operational alternatives based on system status. Because the purpose of the control system is to maintain system variables within prescribed operating ranges, upsets or challenges that can exceed a trip set point resulting in a plant transient and a challenge to plant mitigating systems based on actual plant conditions, are evaluated to safely maintain the plant within the operating ranges. The probabilistic portion of the model is autonomously and automatically adjusted, and the metric of interest (i.e. likelihood of avoiding a trip set point) is recalculated. The digital representation of the physical system (i.e. the DT) performs a deterministic performance–based assessment of the probabilistically identified alternatives identified to validate the probabilistic assessment. A decision-making algorithm selects the appropriate option based on the probabilistic and deterministic assessments and transmits a control signal to a component(s) to initiate a corrective action or informs an operator of its decision.

digital twin↗

Failure Analysis–Informed Risk Assessment Framework for Geological Carbon Storage Using Numerical Simulation and Machine Learning

Geological carbon storage (GCS) is recognized as a critical technology for achieving large-scale reductions in anthropogenic carbon dioxide (CO 2 ) emissions. Ensuring long-term containment and safety requires robust risk assessment frameworks that account for geological uncertainty and identify potential failure scenarios. Among various indicators, the area of review (AoR) serves as a key metric for evaluating storage performance, regulatory compliance, and monitoring design, as it delineates the spatial extent impacted by pressure buildup and plume migration. However, conventional AoR-based risk assessments typically perturb parameters within narrow uncertainty bounds, potentially overlooking rare but high-impact events arising from extreme geological conditions. In this study, we present a failure analysis–informed risk assessment framework for large-scale GCS projects to improve site prescreening and monitoring design. A suite of 300 numerical simulations was generated using stochastic geological models that vary five key parameters: net-to-gross ratio, anisotropy azimuth, porosity multiplier, permeability multiplier, and vertical-to-horizontal permeability ratio. Among these, 200 realizations represent normal geological uncertainty, while 100 additional cases explore extreme yet plausible conditions for failure-case analysis. The AoR was simulated and computed from pressure and CO 2 saturation fields, where the baseline AoR boundary, representing the extent predicted under typical geological uncertainty, was defined as the union of 200 normal-range simulations, and failure was identified when extreme-range cases exceeded this baseline. Results show that incorporating broader parameter uncertainty produces significantly larger AoR extents, underscoring the potential underestimation of risk under conventional uncertainty ranges. Furthermore, spatial probability maps derived from failure-induced AoR exceedance identify regions requiring enhanced monitoring attention. Various machine learning (ML)–based classifiers were developed to predict failure occurrence from geological parameters, with the random forest model achieving the highest performance (F1-score of 0.986). Consistent findings from correlation coefficient, feature importance, and Sobol sensitivity analyses reveal that low net-to-gross ratios and permeability multipliers are the dominant risk drivers, reflecting reduced reservoir connectivity and limited pressure dissipation. Altogether, these results provide a novel framework for risk-informed site prescreening and monitoring design that explicitly considers rare but high-impact geological scenarios in GCS projects.

25 ENERGY STORAGE↗

Cyber100 Compass: Quantification of Cybersecurity Risks for Systems Transitioning to High Levels of Renewables (Final Report)

The shift to high levels of renewable deployment will entail a significant re-engineering of the grid. As investors, utilities, customers, and others prepare for clean energy transitions, there is need to understand how restructuring the grid to accommodate renewables will change the attack surface of the grid and accompanying cyber risk. However, today the cyber-physical risks associated with electric grids incorporating high levels of renewable deployment remain largely unknown. The Cyber100 Compass proof-of-concept application attempts to quantify future cyber-physical security risks by combining risk data gathered from subject matter experts (SMEs) with input from system planners about conditions they expect to be true about their electric systems in the future. Users provide data about their organization’s tolerance for risk; the value they place on avoiding the consequences of different cyber events; and conditions that they expect to be true on their systems at some point in the future. The SMEs provide baseline probabilities for different cyber events; the probability that an event will be low-, moderate-, or high-impact; and the amount by which user-identified conditions on their systems will change the likelihood of the cyber events. The application takes both the user and SME input and performs a series of Monte Carlo simulations to arrive at a quantification of risk.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Managing Marine Energy Risks for Project Success

This presentation reviews recommended practices for marine energy risk management based on NLR's recent risk management framework publication (https://www.nrel.gov/docs/fy24osti/90212.pdf). This presentation will include a demonstration of risk management processes and techniques that everyone in the marine energy industry can use to successfully meet their project objectives. This presentation will include a description of methods to identify and manage risks that are specific to marine energy, while demonstrating this through tools such as risk registers, failure modes effects and criticality analysis (FMECA), and more tools that are currently being developed. The goal of this presentation is for the participants to have knowledge and access to tools to help them manage the risks specific to their marine energy projects.

13 HYDRO ENERGY↗

An Integrated Approach to Risk Assessment for Concurrent Design

This paper describes an approach to risk assessment and analysis suited to the early phase, concurrent design of a space mission. The approach integrates an agile, multi-user risk collection tool, a more in-depth risk analysis tool, and repositories of risk information. A JPL developed tool, named RAP, is used for collecting expert opinions about risk from designers involved in the concurrent design of a space mission. Another in-house developed risk assessment tool, named DDP, is used for the analysis.

defect detection and prevention (DDP)↗

An Integrated Reliability and Physics-Based Risk Modeling Approach for Assessing Human Spaceflight Systems

This paper presents an integrated reliability and physics-based risk modeling approach for assessing human spaceflight systems. The approach is demonstrated using an example, end-to-end risk assessment of a generic-crewed space transportation system during a reference mission to the International Space Station. The behavior of the system is modeled using analysis techniques from multiple disciplines in order to properly capture the dynamic time- and state- dependent consequences of failures encountered in different mission phases. We discuss how to combine traditional reliability analyses with Monte Carlo simulation methods and physics-based engineering models to produce loss-of- mission and loss-of-crew risk estimates supporting risk-based decision-making and requirement verification. This approach facilitates risk-informed design by providing more realistic representation of system failures and interactions; identifying key risk-driving sensitivities, dependencies, and assumptions; and tracking multiple figures of merit within a single, responsive assessment framework that can readily incorporate evolving design information throughout system development.

Risk assessment↗

The Hazard Components of Representative Key Risks. The Physical Climate Perspective

The framework of Representative Key Risks (RKRs) has been adopted by the Intergovernmental Panel on Climate Change Working Group II (WGII) to categorize, assess and communicate a wide range of regional and sectoral key risks from climate change. These are risks expected to become severe due to the potentially detrimental convergence of changing climate conditions with the exposure and vulnerability of human and natural systems. Other papers in this special issue treat each of eight RKRs holistically by assessing their current status and future evolution as a result of this convergence. However, in these papers, such assessment cannot always be organized according to a systematic gradation of climatic changes. Often the big-picture evolution of risk has to be extrapolated from either qualitative effects of “low”, “medium” and “high” warming, or limited/focused analysis of the consequences of particular mitigation choices (e.g., benefits of limiting warming to 1.5 or 2C), together with consideration of the socio-economic context and possible adaptation choices. In this study we offer a representation – as systematic as possible given current literature and assessments – of the future evolution of the hazard components of RKRs. We identify the relevant hazards for each RKR, based upon the WGII authors’ assessment, and we report on their current state and expected future changes in magnitude, intensity and/or frequency, linking these changes to Global Warming Levels (GWLs) to the extent possible. We draw on the assessment of changes in climatic impact-drivers relevant to RKRs described in the 6th Assessment Report by Working Group I supplemented when needed by more recent literature. For some of these quantities - like regional trends in oceanic and atmospheric temperature and precipitation, some heat and precipitation extremes, permafrost thaw and Northern Hemisphere snow cover - a strong and quantitative relationship with increasing GWLs has been identified. For others - like frequency and intensity of tropical cyclones and extra-tropical storms, and fire weather - that link can only be described qualitatively. For some processes - like the behavior of ice sheets, or changes in circulation dynamics - large uncertainties about the effects of different GWLs remain, and for a few others - like ocean pH and air pollution - the composition of the scenario of anthropogenic emissions is most relevant, rather than the warming reached. In almost all cases, however, the basic message remains that every small increment in CO2 concentration in the atmosphere and associated warming will bring changes in climate phenomena that will contribute to increasing risk of impacts on human and natural systems, in the absence of compensating changes in these systems’ exposure and vulnerability, and in the absence of effective adaptation. Our picture of the evolution of RKR-relevant climatic impact-drivers complements and enriches the treatment of RKRs in the other papers in at least two ways: by filling in their often only cursory or limited representation of the physical climate aspects driving impacts, and by providing a fuller representation of their future potential evolution, an important component – if never the only one – of the future evolution of risk severity.

Representative Key Risks↗

Fault Management Algorithm Risk Assessment for the NASA Space Launch System

This paper presents the false positive (FP) and false negative (FN) risk assessment process currently being conducted for the Space Launch System (SLS) Artemis II Fault Management (FM) detection functions. The analysis scope, general assumptions and guide rules, and key modeling concepts were discussed to establish the basis of the risk assessments conducted. Initial analyses indicated a dominance in the total risk by software and firmware failures. This paper presents efforts applied to refine the software risks and the overall impact of implementing those modifications. Current analyses conducted on the detection functions implemented for the SLS Artemis II mission indicate primary risk drivers for the individual FM detection functions are flight software failures, firmware design failures, and hardware Common Cause Failures (CCFs). There still remains issues of how to account for time and redundancy in the software risk estimations.

probability risk analysis↗

Fault Management Algorithm Risk Assessment for the NASA Space Launch System

This presentation describes the false positive (FP) and false negative (FN) risk assessment process currently being conducted for the Space Launch System (SLS) Artemis II Fault Management (FM) detection functions. The analysis scope, general assumptions and guide rules, and key modeling concepts were discussed to establish the basis of the risk assessments conducted. Initial analyses indicated a dominance in the total risk by software and firmware failures. This paper presents efforts applied to refine the software risks and the overall impact of implementing those modifications. Current analyses conducted on the detection functions implemented for the SLS Artemis II mission indicate primary risk drivers for the individual FM detection functions are flight software failures, firmware design failures, and hardware Common Cause Failures (CCFs). There still remains issues of how to account for time and redundancy in the software risk estimations.

probability risk analysis↗

Ground Risk Informed Operational Planning for Small Unmanned Aerial Systems

Increasing quantities of small Unmanned Aerial Systems (sUAS) operations present many challenges in terms of safe adoption and integration into existing airspace. The ability to study and quantify the risk to third parties on the ground prior to flight is an important step toward enabling Beyond Visual Line of Sight (BVLOS) operations. The Ground Risk Assessment Service Provider (GRASP) software is a capability developed by NASA to assist with third-party risk quantification and risk-informed flight planning. In this paper, two nominal flight paths intended to represent an infrastructure inspection mission are evaluated using the software to demonstrate its utility. A method is also introduced for adding other NASA-developed capabilities into a single architecture to assess a broader set of operational risks associated with BVLOS operations. These capabilities include a navigation system performance prediction tool, a high fidelity vehicle dynamics model, high resolution wind field data, and other information pertinent to operators. Data produced by these capabilities are combined to enable use of the Performance Based Navigation (PBN) concept borrowed from conventional aviation, providing quantified flight path uncertainty for where the sUAS is likely to be relative to its nominal flight plan. Ground risk is assessed within this region of uncertainty, giving a higher level of confidence in the solution compared to an analysis of only the nominal flight path.

Ground Risk↗

CalWave Design for PacWave - Preliminary Design Phase - Risk Management Plan

The project objectives for CalWave's deployment at PacWave are distinguished by the Preliminary Design Phase and the Detailed Design Phase. During the Preliminary Design Phase, the Risk Register was established to identify risks and mitigation strategies. The Risk Management Plan assesses potential risks of CalWave's technology and accompanying processes and describes the risk mitigation strategies for the project.

16 TIDAL AND WAVE POWER↗