Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “quantitative risk assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Atmospheric Modeling to Enable Prediction of Golden Eagle Interactions with Wind Power Plants

This panel will explore the use of technologies and methods that enhance our understanding of eagle behavior in and near wind energy facilities. The decreasing costs of tracking technologies and substantial computational capabilities are allowing for finer resolution and confidence of eagle observations and the modeling of such datasets increase our understanding of their movements and use of airspace and underlying landscapes. Behavior ecologists' intrinsic knowledge of eagle behavior can augment and further enhance inferences from technology-derived information alone, e.g., GPS, camera, radar, etc. The panel will discuss the state of science and, given the cost-effective tools available, what research objectives are emerging to better assess and reduce wind-eagle risk. The discussion will focus on the following areas: Integrating Behavioral and Quantitative Ecologist perspectives of bald eagle and golden eagle behavior and wind energy risk; Regional-scale vs. facility-scale investigations of bald eagle and golden eagle use of airspace. For example, avoidance behavior to assess risk at facility-scale, and eagle use of landscapes, e.g., territories, nesting, and life-cycle behavior; Bald eagle and golden eagle use of airspace and nexus with atmospheric flow dynamics of wind energy generation; GPS, biomonitoring, tracking camera, radar, and other tools/techniques for deepening the knowledge of eagle behavior in and around wind farms.

49 EE - Wind and Water Power Program - Wind (EE-4W↗
DOE OSTI2022

From Qualitative to Quantitative AOP: A Case Study of Neurodegeneration

Adverse outcome pathways (AOPs) include a sequence of events that connect a molecular-level initiating event with an adverse outcome at the cellular level for human health endpoints, or at the population level for ecological endpoints. When there is enough quantitative understanding of the relationships between key events in an AOP, a mathematical model may be developed to connect key events in a quantitative AOP (qAOP). Ideally, a qAOP will reduce the time and resources spent for chemical toxicity testing and risk assessment and enable the extrapolation of data collected at the molecular-level by in vitro assays, for example, to predict whether an adverse outcome may occur. Here, we review AOPs in the AOPWiki, an AOP repository, to determine best practices that would facilitate conversion from AOP to qAOP. Then, focusing on a particular case study, acetylcholinesterase inhibition leading to neurodegeneration, we describe specific methods and challenges. Examples of challenges include the availability and collection of quantitative data amenable to model development, the lack of studies that measure multiple key events, and model accessibility or transferability across platforms. We conclude with recommendations for improving key event and key event relationship descriptions in the AOPWiki that facilitate the transition of qualitative AOPs to qAOPs.

Sinitsyn, Dennis↗
DOE OSTI2020

Projected increase in compound dry and hot events over global land areas

Abstract Under global warming, dry and hot events have been increasing in recent decades and are projected to increase in the future across global land areas. The impacts of compound dry and hot events may lead to increased stress to the natural and human systems than separate dry or hot events. Thus, quantitative assessments of global land areas affected by these compound events are needed to understand their risks. This study focuses on the variation in global land and cropland areas affected by compound dry and hot events for both historical and future periods using observations from Climatic Research Unit (CRU) and simulations from Coupled Model Intercomparison Project Phase 5 (CMIP5) climate models. Based on historical observations and simulations, a substantial increase in the spatial extent of these compound events was detected, especially since the 1980s. Climate model projections under the Representative Concentration Pathway (RCP) 8.5 scenario reveal that both global land and cropland areas affected by compound dry and hot events will increase to approximately 1.7–1.8 times by the end of the 21st century. Based on different thresholds of compound events, the spatial extent of global land areas during the June–July–August (December–January–February) season will increase by 12.38–17.20% (7.83–11.19%) in 2050–2099 relative to that in 1950–1999, and the spatial extent of global cropland areas will increase by 14.69–19.63% (9.60–14.48%). The increase in areas affected by compound dry and hot events may lead to more losses in different sectors in the future and more efforts are needed to cope with their potential impacts.

Wu, Xinying↗
DOE OSTI2020

Gene Expression Thresholds Derived From Short-term Exposures Identify Rat Liver Tumorigens

Abstract Traditional methods for cancer risk assessment are resource-intensive, retrospective, and not feasible for the vast majority of environmental chemicals. In this study, we investigated whether quantitative genomic data from short-term studies may be used to set protective thresholds for potential tumorigenic effects. We hypothesized that gene expression biomarkers measuring activation of the key early events in established pathways for rodent liver cancer exhibit cross-chemical thresholds for tumorigenesis predictive for liver cancer risk. We defined biomarker thresholds for 6 major liver cancer pathways using training sets of chemicals with short-term genomic data (3–29 days of exposure) from the TG-GATES (n = 77 chemicals) and DrugMatrix (n = 86 chemicals) databases and then tested these thresholds within and between datasets. The 6 pathway biomarkers represented genotoxicity, cytotoxicity, and activation of xenobiotic, steroid, and lipid receptors (aryl hydrocarbon receptor, constitutive activated receptor, estrogen receptor, and peroxisome proliferator-activated receptor α). Thresholds were calculated as the maximum values derived from exposures without detectable liver tumor outcomes. We identified clear response values that were consistent across training and test sets. Thresholds derived from the TG-GATES training set were highly predictive (97%) in a test set of independent chemicals, whereas thresholds derived from the DrugMatrix study were 96%–97% predictive for the TG-GATES study. Threshold values derived from an abridged gene list (2/biomarker) also exhibited high predictive accuracy (91%–94%). These findings support the idea that early genomic changes can be used to establish threshold estimates or “molecular tipping points” that are predictive of later-life health outcomes.

Hill, III,, Thomas↗
DOE OSTI2023

An Integrated Framework for Risk Assessment of Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology Refinement and Exploration

This report documents activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2023 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective, and secure DI&C technologies for digital upgrades/designs. A risk assessment-informed framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk informed capability to quantitatively estimate the safety margin obtained from plant modernization, especially for safety-related DI&C systems, (2) support and supplement existing risk informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of safety-related DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals, the LWRS-developed framework provides a means to address relevant technical issues by: (1) defining a risk informed analysis process for DI&C upgrade that integrates hazard analysis, reliability analysis, and consequence analysis, (2) applying risk informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development and deployment of advanced DI&C technologies in nuclear power plants (NPPs). Adding diversity within a system or components is the primary means to eliminate and mitigate CCFs, but diversity also increases system complexity and may not address all sources of systematic failures. Optimization of diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in safety-related DI&C systems of NPPs and supporting relevant design optimization, the proposed framework provides: (a) A best-estimate, risk informed capability to address new technical digital issues quantitatively, focusing on software CCFs in safety-related DI&C systems of NPPs; (b) A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to predict and prevent risk in the early design stage of DI&C systems; (c) Technical bases and risk informed insights to assist users address the risk informed alternatives for evaluation of CCFs in safety-related DI&C systems of NPPs; and (d) A risk informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The research and development efforts of this project in FY 2023 are focused on refining current methods on software CCF modeling and estimation and exploring additional innovative approaches to risk assessment of DI&C systems to enable a more comprehensive and complete assessment of various safety-related DI&C design architectures. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists. It should be noted that all the analyses are performed for the demonstration of the methodology, not for the evaluation of an actual digital control system. Results are obtained based on limited design information and testing data.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2021

Prioritizing Countries by Concern Regarding Access to Weapons of Mass Destruction Materials

This article presents a global prioritization methodology that evaluates the relative risks of non-state actor acquisition of materials that could be used in chemical, biological, radiological, nuclear and high explosive Weapons of Mass Destruction (WMD) from the country’s relevant infrastructure. Prioritization is based on three domains: 1. Assessing relative scale of materials in each country, 2. The country’s corresponding security posture, and 3. The presence of threat actors. The output is a list of countries prioritized from greatest risk to least. Rather than providing an overall 1 to N ranking, however, the results are placed into tiers based upon their natural groupings within the three domains. The countries in the highest tiers are flagged as potential US national security concern; those scoring in the middle and at the bottom are flagged as posing lower US national security concern. A systematic approach assesses each country by leveraging many disciplines, such as risk and decision analysis, as well as expert judgement. A quantitative value model based on Multi-Attribute Value Theory (MAVT) organizes the objectives scoring criteria into a value tree using lessons learned from previous studies, published literature, and expert judgement. The article presents the prioritization categories and corresponding value model scoring criteria to include measurement type, weight, range, and value preference. Country names and data are notional in order to share the details on the underlying methodology and model without identification of actual security risks. A deliberative process addresses factors external to the model and scrutinizes inputs, methodology, model, and results.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2020

The Role of Innovation in the Circularity of EV Lithium-Ion Batteries

This case study analysis highlights the role of innovations in EV battery design (cells, modules, and packs), reverse supply chain, and recycling processes in yielding value for the economics of recycling (and have the largest impact on the circularity of LIBs). Part of the assessment of value will be a semi-quantitative evaluation of the value of resilience in the rapidly evolving LIB market – i.e., there are a variety of risks that recyclers would face in making a financial commitment to a recycling facility including; the possibility that batteries would not be collected in sufficient quantities, the market for key constituents (e.g., cobalt) might decrease because of changes in battery chemistry, battery manufacturers may not be willing to pay as much for recycled material, etc. The analysis would be semi-quantitative in that two simple models would be used to assess 1. material flows using a previously developed excel-based reverse supply chain flows model, and 2. A LIB recycling process material and energy balance cost model that will be used to qualitatively assess the cost impacts of process innovations and changes in feed streams. Both sets of models are highly speculative in that they rely on a multitude of assumptions and input values (e.g., EV adoption rates) that vary widely in the literature. Additionally, the initial process flow diagrams and equipment lists for the recycling cost model are based on the Argonne EverBatt model, which is still under development. However, in combination with a critical review of the literature, economic modeling can yield valuable insights into the role of innovation in the circularity of LIBs and high-technology (“energy relevant”) products in general.

28 EE - Advanced Manufacturing Office (EE-5A)↗
DOE OSTI2023

Causal CCF Parameter Estimations 2020

This report documents the quantitative results of the causal common-cause failure (CCF) parameter estimations for the failure cause groups “component,” “design,” “environment,” “human,” and “other,” based on CCF data through 2020 in the U.S. Nuclear Regulatory Commission (NRC) CCF database: https://rads.inl.gov/Pages/CCF.aspx. This report utilizes the same data period (2006–2020) and CCF templates as INL/EXT-21-62940, Revision 1, CCF Parameter Estimations, 2020 Update. The 2015 causal CCF prior distributions for the specific failure cause groups (instead of the 2015 generic CCF prior distributions) were used in this report to estimate the associated causal CCF parameters. All the 2015 causal CCF prior distributions and generic CCF prior distributions were developed in INL/EXT-21-43723, Developing Generic Prior Distributions for Common Cause Failure Alpha Factors and Causal Alpha Factors, using CCF data from 1997 to 2015. These quantitative results were developed to support the causal alpha factor model and should be used as appropriate in probabilistic risk assessment (PRA) studies such as the NRC Significance Determination Process for commercial nuclear power plants in the United States.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

De-Risking High-Recovery Brackish Water Desalination via Flow Reversal and Feed Flushing Using Techno-Economic Assessment

Novel desalination technologies have demonstrated enhanced performance and improved financial metrics over existing processes adopted by industry. Establishing quantitative performance targets is essential for achieving financial benefits over the current state of the art. Herein, we demonstrate how WaterTAP, a techno-economic assessment (TEA) tool, can be used to identify minimum performance metrics necessary to achieve financial benefit over using existing processes. This study evaluates the feasibility of increasing water recovery at the Chino Desalter I above 90 % through the addition of a third variable configuration reverse osmosis (VCRO) stage. Sensitivity analyses revealed flow reversal frequency, feed flushing volume (used as a cleaning step), and membrane lifespan are key factors influencing the financial viability of the VCRO process. The TEA analysis demonstrated that the system must achieve a recovery of 84 % and a 1-year membrane lifespan to have a breakeven LCOW, while achieving 90 % recovery can ultimately reduce the LCOW by 16 %. Notably, a trade-off between decreasing frictional losses and increased osmotic pressure across the recovery range, resulted in a stable specific energy consumption across the recovery range, enabling meaningful LCOW reductions without an energy penalty, a key finding that contrasts with conventional RO. This work demonstrates how TEA can guide system design by identifying key performance targets and exploring trade-offs, enabling data-driven decisions to de-risk innovative processes. These findings underscore the importance of leveraging TEA to evaluate scaling mitigation strategies and optimize inland desalination systems for sustainable and cost-effective operation.

14 SOLAR ENERGY↗
DOE OSTI2020

Mixed-Mechanism Stimulation Enabled Enhanced Geothermal Systems (CRADA FP00007509 Final Report)

In this project, we aimed to develop a robust, novel EGS design that would enable broad deployment of geothermal energy at costs competitive with other sources of renewable energy. The technical objectives included developing reservoir models for synthetic geothermal systems that meet target reservoir performance characteristics, performing a quantitative assessment of selection criteria for candidate geothermal sites, perform proppant studies under relevant geothermal conditions, and complete an induced seismicity risk analysis for potential geothermal development sites. The project team made significant progress towards these objectives. Specifically, we developed a prioritization to rank candidate sites for suitability of our technology based on 10 separate technical, operational, logistic, regulatory, and commercial criteria. The team performed laboratory testing at Lawrence Berkeley National Laboratory to characterize the functionality of several different types of proppant materials at temperatures of up to 200 C for durations of up to 9 weeks. We also created an Induced Seismicity Mitigation Plan for the top two sites selected for our future field demonstrations.

58 GEOSCIENCES↗
DOE OSTI2022

Common Cause Failure Evaluation of High Safety-significant Safety-related Digital Instrumentation and Control Systems

Digital instrumentation and control (DI&C) systems in nuclear power plants (NPPs) have many advantages over analog systems but also pose different engineering and technical challenges, such as potential threats due to common cause failures (CCFs). This paper proposes a Platform for Risk Assessment of DI&C (PRADIC) developed by Idaho National Laboratory for dealing with potential software CCFs in DI&C systems of NPPs. The methodology development of PRADIC on the quantitative evaluation of software CCFs in high safety-significant safety-related DI&C systems in NPPs is illustrated in this paper. In PRADIC, qualitative hazard analysis and quantitative reliability and consequence analysis are successively implemented to obtain quantitative risk information, compare with respective risk evaluation acceptance criteria, and provide suggestions for risk reduction and design optimization. A comprehensive case study was also performed and documented in this paper. Results show that PRADIC can effectively identify potential digital-based CCFs, estimate their failure probabilities, and evaluate their impacts to system and plant safety.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

The Technical, Economic, Risk, and Adoption Assessment for Evaluating Work Reduction Opportunities in the Nuclear Industry

Automation and cost-saving initiatives, such as process automation with advances in artificial intelligence, are gaining traction in modernization efforts across the nuclear industry. As these innovations are increasingly adopted, it becomes crucial to evaluate their impacts comprehensively. Various technical and economic attributes, along with risk and human readiness factors, must be achieved to ensure that innovative projects enabling automation and modernization are successful. However, no systematic or integrated framework exists that allows plants to evaluate these innovative projects. To address this gap, the Technical, Economic, Risk, and Adoption (TERA) assessment offers a structured method to evaluate innovative technologies, ensuring solutions meet both operational and safety standards. The TERA framework integrates the disparate perspectives to assess modernization opportunities in nuclear operations. It combines qualitative and quantitative models to evaluate the relationship between performance and business impacts, while also enabling continuous re-evaluation during project development. This approach helps plant owners identify high-priority opportunities, optimize cost savings, and minimize risks, ensuring projects remain on track to achieve desired returns. By providing a comprehensive, systematic methodology, TERA enables informed, data-driven decisions that support successful modernization efforts, enhancing efficiency, safety, and cost savings across nuclear operations. This paper explains the TERA framework and its benefits for the nuclear industry.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

Risk Analysis of Various Design Architectures for High Safety-significant Safety-related Digital Instrumentation and Control Systems of Nuclear Power Plants during Accident Scenarios

This report documents the plus-up activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2022 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades/designs. An integrated risk assessment technology for the DI&C systems was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the safety margin obtained from plant modernization, especially for the high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing advanced risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems to support system design decisions and diversity and redundancy applications, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals and deal with the expensive licensing justifications from regulatory insights, the LWRS-developed framework instructs nuclear vendors and utilities on how to effectively lower the costs associated with digital compliance and speed industry advances by: (1) defining an integrated risk-informed analysis process for DI&C upgrade, including hazard analysis, reliability analysis, and consequence analysis, (2) applying systematic and risk-informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development, licensing, and deployment of advanced DI&C technologies on nuclear power plant (NPPs). Adding diversity within system or components is the main means to eliminate and mitigate CCFs, but diversity also increases plant complexity and errors and may not address all sources of systematic failures. How to optimize the diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in HSSSR DI&C systems of NPPs and supporting relevant design optimization, the framework provides: ? An integrated best-estimate, risk-informed capability to address new technical digital issues quantitatively, accurately, and efficiently in plan modernization progress, such as software CCFs in HSSSR DI&C systems of NPPs ? A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to efficiently predict and prevent risk in the early design stage of DI&C systems ? Technical bases and risk-informed insights to assist U.S. Nuclear Regulatory Commission (NRC) and industry to address and fulfill the risk-informed alternatives for evaluation of CCFs in HSSSR DI&C systems of NPPs ? An integrated risk-informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The plus-up research and development efforts of this project in FY 2022 are focused on methodology improvement of software CCF modeling and estimation, prevention analysis, importance analysis and risk analysis of various design architectures of HSSSR DI&C systems. This work greatly enhances the capability of the LWRS-developed framework for the risk assessment and design optimization of safety-critical DI&C systems. It should be noted that all the analyses are performed for the demonstration of the LWRS-developed framework, not for the evaluation of relevant systems. Results are obtained based on very limited design information and testing data.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

Common Cause Failure Evaluation of High Safety Significant Safety-related Digital Instrumentation and Control Systems using IRADIC Technology

Digital instrumentation and control (DI&C) systems in nuclear power plants (NPPs) have many advantages over analog systems but also pose different engineering and technical challenges, such as potential threats due to common cause failures (CCFs). This paper proposes an integrated risk assessment technology for DI&C systems (IRADIC) developed by Idaho National Laboratory for dealing with potential software CCFs in DI&C systems of NPPs. The methodology development of the IRADIC technology on the quantitative evaluation of software CCFs in high safety-significant safety-related DI&C systems in NPPs is illustrated in this paper. In IRADIC, qualitative hazard analysis and quantitative reliability and consequence analysis are successively implemented to obtain quantitative risk information, compare with respective risk evaluation acceptance criteria, and provide suggestions for risk reduction and design optimization. A comprehensive case study was also performed and documented in this paper. Results show that the IRADIC technology can effectively identify potential digital-based CCFs, estimate their failure probabilities, and evaluate their impacts to system and plant safety.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

Reactive chemical transport simulations of geologic carbon sequestration: Methods and applications

Chemical reaction simulations are considerably used to quantitatively assess the long-term geologic carbon sequestration (GCS), such as CO 2 sequestration capacity estimations, leakage pathway analyses, enhanced oil recovery (EOR) efficiency studies, and risk assessments of sealing formations (caprocks), wellbores, and overlying underground water resources. All these require a deep understanding of the CO 2 - associated chemical reactions. To ensure long-term, safe CO 2 sequestration in the intended formations, modeling is the only way to plausibly assess the CO 2 flow, reaction, and transport over thousands of years. This review summarizes the multiple methodologies for describing homogeneous and heterogeneous chemical reaction patterns and multiscale application examples, the recent progress and current status of chemical reaction simulations for GCS, and the impact of such simulations on geological CO2 sequestration performance. Technical gaps and future challenges are also discussed for further study. The trends and challenges of such studies include: (1) the combination of coupled chemical, mechanical, and transport processes with calibrated experiments and associated uncertainty/risk assessments; (2) enhancement of the ability to simulate detailed geophysical and geochemical equations to mimic in situ conditions; and (3) characterization of multiscale subsurface systems with detailed conceptual models and assignment of suitable boundary conditions for field-scale sequestration fields. One major gap remaining is the current lack of accurate (and scale-justified) kinetic and equilibrium chemical reaction parameters under reservoir conditions. Advanced models that couple chemical, mechanical, and transport processes with scale-justified parameters, from lab to field-scale experiments, are required for quantitative assessments of sequestration capacity and the long-term safety of GCS projects.

58 GEOSCIENCES↗
DOE OSTI2020

A PROVEN APPROACH FOR EFFECTIVE COMPUTER SECURITY SELF-ASSESSMENTS AT NUCLEAR FACILITIES

A proven method for conducting cybersecurity self-assessments at nuclear power plants is now available for international use. This method was originally developed by Pacific Northwest National Laboratory, under the sponsorship of the U.S. Nuclear Regulatory Commission (NRC), for use at U.S. nuclear power plants. The “Method,” described in NUREG/CR-6847 “Cyber Security Self-Assessment Method for U.S. Nuclear Power Plants,” was originally a limited release document that was withheld from public disclosure but is now publicly available. The Method provides a systematic, phased, and risk-informed approach to help decision makers and security specialists understand their relative cybersecurity posture. Completed Method assessments may be used to support or validate selection of computer security controls to mitigate cyber threats as well as demonstrate compliance with regulations or statutes enacted by competent authorities. The Method assesses the cybersecurity posture of key systems at a nuclear facility with a focus on protection of design base functions. It considers both physical and digital elements of system vulnerabilities and the resulting potential consequences from exploitation. It is well-suited for addressing blended cyberattacks. A semi-quantitative analytical approach is used in the evaluation of potential vulnerabilities, consequences, and risks and provides a technical basis for the selection of security controls to mitigate cyberattacks. The Method’s application at U.S. nuclear power plants has been very encouraging. The only nuclear plant in the United States that did not have adverse findings during its initial NRC computer security inspection prepared for inspection through the diligent application of this self-assessment method and the implementation of recommendations that came out of that self-assessment. Nuclear facilities around the world might find application of the Method extremely helpful for making cost-effective, risk-based decisions regarding computer security and for preparing to pass computer security inspections by their competent authorities.

Cyber security, Nuclear security, Self-assessment↗
DOE OSTI2023

Summary of Technical Peer Review on the Risk Assessment Framework proposed in Report INL/RPT-22-68656 for Digital Instrumentation and Control Systems

This report summarizes the peer review activities initiated by Idaho National Laboratory (INL) during fiscal year (FY) 2023 for the evaluation and improvement of the methodology developed under the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective and secure DI&C technologies for digital upgrades/designs. A framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the risk impact of plant modernization, considering the introduction of high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. The R&D efforts of this project from FY 2019 through FY 2022 were focused on methodology improvement and demonstration of the proposed framework for the risk assessment and design optimization of safety-critical DI&C systems. Collaborations with the nuclear industry have been initiated to support the reliability and risk assessment of their DI&C systems by using the proposed framework. In FY 2023, the framework has reached to a point for a technical peer review and obtain stakeholder feedback. This peer review activity includes coordination of the reviews performed by a group of industry stakeholders, documentation of the peer review suggestions, providing resolutions and responses to the peer review comments. The objective of this technical peer review is to obtain representative feedback on the proposed framework to improve the technical qualities of its methodology and readiness for deployment to the industry. Feedback may identify potential areas for improvement and further development. The Subject Matter experts were invited to review the latest project report documenting the methodology developed in the project and provide evaluations of the technical qualities of the proposed framework and relevant methods. The reviewed project report is “An Integrated Framework for Risk Assessment of High Safety-significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology and Demonstration” INL/RPT-22-68656 (short as “INL/RPT-22-68656” in this report). This peer review report documents the technical questions provided for technical peer review and introduces the technical peer reviewers from the stakeholders including nuclear utilities, regulators, and universities. Comments from technical peer reviewers and the resolutions and responses to these comments are outlined. Insights and lessons learned from the technical peer review are summarized in conclusions and future work. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Weapon Systems Risk-Assessment Tool Review

To anticipate, and potentially mitigate, future problems in aging weapon systems, four unique riskassessment techniques were analyzed, including root-cause analysis tools, six-sigma problemsolving approaches, and lean six-sigma tools. Identifying the most efficient process, or tool, is crucial for successful application to current and future weapon systems, subsystems, and components. The following processes were reviewed: Fault Tree Analysis, Failure Modes and Effects Analysis, Bow-Tie Analysis, and Hazard and Operability Study. A systematic assessment was performed to determine the most desirable method, and included investigating qualitative versus quantitative characteristics, scope, process durations, advantages, and limitations. Presented results will outline the study findings and further illustrate a capacity to identify future issues and/or concerns, and ultimately, reduce risk.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗