SEARCH · Engineering Papers

Results for “Risk management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

All sources NASA NTRS DOE OSTI

DOE OSTI2020

Southeast Regional CO 2 Utilization and Storage Acceleration Partnership (SECARB-USA): Preliminary Regional Assessment of Potential Storage Complexes, Including Capacities and Costs, Based on Application of NRAP and SCO2T (Deliverable 3.3) Storage Complexes

The Recipient will assist with the field validation of one or more risk assessment toolsets through: 1) collaborative research; 2) sharing of relevant datasets, information, and technical insights from field efforts; and 3) other modeling and simulation toolsets as they are developed. Collaborative research could include, but is not limited to: 1) demonstrating use of field data for improved leakage pathway characterization, uncertainty reduction, and risk management and uncertainty workflows; 2) testing and validation of a specific National Risk Assessment Partnership (NRAP) tool using site specific data; and 3) improved modeling or reduced-order modeling of geophysical monitoring.

42 ENGINEERING↗

DOE OSTI2024

Forest structural complexity and ignition pattern influence simulated prescribed fire effects

Background: Forest structural characteristics, the burning environment, and the choice of ignition pattern each influence prescribed fire behaviors and resulting fire effects; however, few studies examine the influences and interactions of these factors. Understanding how interactions among these drivers can influence prescribed fire behavior and effects is crucial for executing prescribed fires that can safely and effectively meet management objectives. To analyze the interactions between the fuels complex and ignition patterns, we used FIRETEC, a three-dimensional computational fluid dynamics fire behavior model, to simulate fire behavior and effects across a range of horizontal and vertical forest structural complexities. For each forest structure, we then simulated three different prescribed fires each with a unique ignition pattern: strip-head, dot, and alternating dot. Results: Forest structural complexity and ignition pattern affected the proportions of simulated crown scorch, consumption, and damage for prescribed fires in a dry, fire-prone ecosystem. Prescribed fires in forests with complex canopy structures resulted in increased crown consumption, scorch, and damage compared to less spatially complex forests. The choice of using a strip-head ignition pattern over either a dot or alternating-dot pattern increased the degree of crown foliage scorched and damaged, though did not affect the proportion of crown consumed. We found no evidence of an interaction between forest structural complexity and ignition pattern on canopy fuel consumption, scorch, or damage. Conclusions: We found that forest structure and ignition pattern, two powerful drivers of fire behavior that forest managers can readily account for or even manipulate, can be leveraged to influence fire behavior and the resultant fire effects of prescribed fire. These simulation findings have critical implications for how managers can plan and perform forest thinning and prescribed burn treatments to meet risk management or ecological objectives.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI1993

Nuclear Safety [Vol. 34, No. 1, January-March 1993]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 1 An Integrated Regional Approach To Risk Management of Industrial Systems, S. Chakraborty and R. Stratton; 9 Annual Technical Meeting of the NRC Cooperative Severe Accident Research Program, E. G. Silver; ACCIDENT ANALYSIS: 13 Deterministic Severe Accident Criteria as Severe Accident Design Criteria and Policy for the New Production Reactor-Heavy Water Reactor, P. T. Rhoads; 20 Proposed Deterministic Severe Accident Criteria for the Heavy Water Reactor-New Production Reactor Containment, K. D. Bergeron, S. E. Slezak, and C. E. Leach; 33 Quasi-Static Core Liquid Level Depression and Long-Term Core Uncovery During a PWR LOCA, Y. Kukita, R. R. Schultz, H. Nakamura, and J. Katayama; 49 LIRA: An Advanced Containment System to Minimize the Accidental Radioactivity Releases, A. Turricchia; 63 Errata to “A Review of Hydrogen Production During Melt/Water Interaction in LWRs,” Vol. 33, No. 4; CONTROL AND INSTRUMENTATION: 64 The Nuplex 80+™ Advanced Control Complex from ABB Combustion Engineering, F. Ridolfo, D. Harmon, and K. Scarola; DESIGN FEATURES: 76 A Scheme for Passive Isolation of the Containment of a Reactor, A. K. Ghosh, V. V. Raj, and K. Kakodkar; 84 Utility Requirements for Safety in the Passive Advanced Light-Water Reactor, T. U. Marston, W. H. Layman, and G. Bockhold, Jr.; WASTE AND SPENT FUEL MANAGEMENT: 91 Activities Related to Waste and Spent Fuel Management, Compiled by M. D. Muhlheim and E. G. Silver; OPERATING EXPERIENCES: 103 Testing Deficiencies in Auxiliary Systems Feedwater Systems, J. D. Kueck; 110 Reactor Shutdown Experience, Compiled by J. W. Cletcher; 113 Selected Safety-Related Events, Compiled by G. A. Murphy; 115 Operating U.S. Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver; RECENT DEVELOPMENTS: 133 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 145 Reports, Standards, and Safety Guides, D. S. Queener; 150 Proposed Rule Changes as of Sept. 30, 1992; ANNOUNCEMENTS: 75 Harvard Short Course on Risk: Science, Assessment, and Management; 102 International Conference on Reactor Physics and Reactor Computations; 102 The Fourth International Conference on Nuclear Waste Reprocessing and Waste Management [RECOD ’94]; 132 International Symposium on the Radiological Exposure of the Population of the European Community from Radioactivity in the Mediterranean Sea [MARINA-MED]; 162 International High-Level Radioactive Waste Conference ‘Technology Integration—Above and Below”; 154 The Authors; 158 Indexes to Nuclear Safety, Volume 33.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI1993

Nuclear Safety [Vol. 34, No. 1, January-March 1993]

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2022

Development and Demonstration of a Fuel-Efficient, Class 8 Tractor & Trailer Engine System (SuperTruck II)

Navistar presents the SuperTruck II (ST II) Final Report to the Unites States Department of Energy (US DOE), which covers the five Budget Periods (BPs) from 10-1-2016 through 6-30-2022. For ST II, Navistar built on the achievements of the SuperTruck I (ST I) Program as a catalyst to continue critical research, design and development, testing, and operations to reach the ambitious goals of the ST II project. This approach allowed Navistar to continue contributing to the essential needs of our nation for safe, efficient, and cost-effective delivery of goods and services, as we reduced negative environmental effects and improved operational productivity. This document contains information specified in DOE F 4600.2, Final Scientific/Technical Report DOE F 241.3, B. SCIENTIFIC/TECHNICAL REPORTS, explaining how we met and exceeded program requirements. Throughout this Final Report, Navistar extracted information from documents prepared during the project that represent our management, design and development, building, and testing efforts to meet and exceed SuperTruck II project goals. Navistar followed Plan requirements to achieve / exceed Project Objectives: a) >100% improvement in vehicle freight efficiency (FE) (on ton-MPG basis) relative to 2009 baseline with stretch goal of 140% improvement [actual: 170%); b) >55% engine brake thermal efficiency (BTE) demonstrated in operational engine at a 65-mph cruise point on a dynamometer – ≥31% increase from 2009 baseline [actual: 55.20% of combined BTE) ; and c) development and implementation of commercially cost effective technologies (in terms of a simple payback). Technology selection / development path focused on developing technologies applicable for production within 3-year approach, while ensuring technology readiness and cost of ownership for end users. The Program was organized into five budget periods: Requirements / Technology Assessment and Initial Hardware Testing; Technology Development and Concept Readiness Demonstration; Technology Finalization and Validation Tractor / Trailer Fabrication, Integration and Commissioning Demonstration; and Fuel Economy (FE) and Brake Thermal Efficiency (BTE) and Program Completion. Leadership was provided by DOE, with tasks performed by laboratories (Argonne National Laboratory, Lawrence Livermore National Laboratory); partners at Bosch, TPI, Dana, and J.B. Hunt; , and support from University of Michigan and Clemson University. Navistar lead this team with Principal Investigator / Contracting Officer; Project Manager (PM); Vehicle, Engine, and Aftertreatment Engineers; Finance Manager, Technical Program Leads, and Legal/IP; and other key personnel. Work also included personnel in risk management; funding / budget / finance. Work involved analysis, development, testing, and down selection of individual/system engine, aftertreatment, and vehicle technologies, with integration of selected technologies into a prototype vehicle for demonstration of fuel-efficiency gain. Work also included component/integrated system level development of truck and trailer aerodynamics, base engine efficiency, advanced aftertreatment, combustion efficiency, waste heat recovery, hybrid powertrain, reduced rolling resistance, weight reduction, idle reduction, and driver feedback. As ST II progressed, Navistar performed computer-based modeling / simulations of technologies focused on the primary operational areas: Engine, Aftertreatment, and Vehicle. During the ST II Program, the COVID Virus outbreak unexpectedly challenged by the effects of, which affected staffing, scheduling, design, supplies, availability of materials, production procedures, and testing. The DOE responded by extending the program by three quarters to ensure that project tasks were completed for this vital project. Focus continued on analyzing, developing, testing, and down selecting individual-/system-level engine and vehicle technologies for integration of the final selected technologies into a prototype vehicle that would demonstrate fuel-efficiency gains made possible through these technologies. This included component/integrated system-level development of truck and trailer aerodynamics, base engine efficiency, advanced aftertreatment, combustion efficiency, waste heat recovery, solar power, distributed and intelligent vehicle power, hybrid powertrain, reduced rolling resistance, weight reduction, idle reduction, and driver feedback. Throughout the program, function, reliability, and performance at all levels were ensured through testing. Proof of this approach was demonstrated in multiple, on-road demonstrations: Scenario A (Flatland) Fuel Economy, Scenario B (Hilly) Fuel Economy, and City Cycle Tests. Other benefits derived from ST II included new/improved products, publications, patents, and next-step capabilities related to electric/hydrogen vehicles and autonomous driving.

Zukouski, Russ↗

DOE OSTI2025

Tactical Analysis for Calculating Contextual Risk at Boundaries: Summary of Laboratory Directed Research & Development Effort

The Tactical Analysis for Calculating Contextual Risk at Boundaries (TACCRAB) tool is an innovative digital twin (DT) platform and automated risk algorithm designed to transform operational decision-making in structured screening environments, with an initial focus on Southern Border Land Ports of Entry (POEs). The invention provides integration points for advanced artificial intelligence, predictive modeling, and real-time data analysis to produce a comprehensive risk management tool that enables proactive, data-informed security strategies. The core inventive features of TACCRAB center on its unique risk algorithm, which dynamically calculates contextual risk by synthesizing historical data, near real-time streaming data from the checkpoints themselves, and AI-generated predictions. Unlike traditional risk assessment methods, TACCRAB utilizes a DT to provide comprehensive operational insights, allowing stakeholders to visualize, simulate, and optimize checkpoint configurations with unprecedented speed and contextual awareness. TACCRAB's key innovation lies in its ability to combine multiple complex inputs - including technology detection probabilities, resource availability, screening pathway characteristics, and threat actor behavioral patterns - into a unified risk calculation and update these inputs based on changing operational and environmental conditions. By leveraging a DT that continuously updates and learns from linked data, TACCRAB can suggest adaptive mitigation strategies that minimize risk while maintaining operational efficiency. Particularly novel is the platform's approach to decision support, which goes beyond static risk assessment. The DT provides dynamic metrics such as wait times, resource allocation effectiveness, and potential emerging threat scenarios, enabling users to view sophisticated, relevant what-if simulations and optimize checkpoint operations in near real-time. The system's architecture allows for generalized application across different screening environments, such as secure facilities, ports of entry, and soft targets, making it a versatile tool for security and operational management. The invention distinguishes itself through its comprehensive integration of predictive modeling, AI-driven pattern discovery, and user-friendly interface design. By combining these elements, TACCRAB transforms complex risk data into actionable insights, supporting decision-makers at various organizational levels - from booth agents making split-second screening decisions to checkpoint managers optimizing the day's resource allocation to strategic planners managing long-term investments.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2024

The Screening Tool for Industrial Resilience: Risk-Informed Decision Making to Support Resilience Planning

The Screening Tool for Industrial Resilience (STIR) helps small and medium-sized manufacturing plants manage risk to their production. Developed by the Pacific Northwest National Laboratory under direction and funding from the Department of Energy’s Office of Manufacturing and Energy Supply Chains, the STIR helps manufacturers enhance their resilience to a variety of disruptive events, both natural and human-caused, that could interrupt normal operations. This report provides an overview of the STIR’s risk-informed, high-level approach to resilience planning, which identifies potential solutions that could enhance site resilience based on calculated major risk drivers.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2022

Large-scale Hydrogen Storage – Risk Assessment Seattle City Light and Port of Seattle [Abstract]

This CRADA presents the strategy that Pacific Northwest National Laboratory (PNNL) and Sandia National Laboratories (SNL) will take to support Seattle City Light (SCL), and the Port of Seattle (Port) in performing a risk assessment of large-scale hydrogen storage. Risk assessment is often used to ensure that adequate measures are taken to protect workers and the public, the environment, infrastructure, and assets. A detailed risk assessment can also be used to direct funding and upgrades, to specific components and sub-systems in order to mitigate risks to the larger system. In this way risk assessments are often employed as a part of a larger risk management strategy, with the goal of minimizing the occurrence of hazards and to identify means to limit their consequences. Risk assessment is often used to engage and inform regulators, and to communicate how specific regulations are being met. However, it is important to note that the proposed work is not intended for SCL and the Port to use in order to gain regulatory acceptance for their proposed activities. The work performed as a part of this effort will be a preliminary risk assessment for early-stage component and system designs and should be considered research and development (R&D). As such, the proposed work will be performed to a quality level and design maturity consistent with R&D and is not considered appropriate for final safety analysis and regulatory compliance purposes. Previous and on-going work at SCL and the Port demonstrated the utility of deploying hydrogen systems at the Port. The deployment of hydrogen at the Port is a part of a larger vision of using hydrogen to address a range of issues for SCL and the Port. These include large-scale fueling of MD/HD vehicles, cargo-handling equipment (CHE), and harbor vessels to reduce emissions; support of adjacent LD vehicles; support of critical port operations during extreme events (i.e., resiliency); deferral of more capital- and time-intensive electrical distribution system upgrades while still supporting evolving port operations and decarbonization efforts; facilitating electrification by establishing energy storage as a grid resource, starting at strategic port locations; creation of a flexible market resource that can be used by SCL to generate revenue via arbitrage; support of planned future maritime operations that involve heavy use of hydrogen for ocean-going vessels; and future end-use applications involving natural gas pipeline hydrogen injection. Ultimately, the success of these activities is underpinned by the deployed storage capacity. Large-scale deployment of hydrogen systems will require hydrogen storage at a scale that has not been demonstrated. In addition, the ideal location for such multi-use systems is near the end user which will often necessitate deploying into urban and/or industrial areas. A detailed risk assessment using the Port as a test case is necessary to ensure the deployment of large-scale hydrogen is successful. Many technologies have been proposed for hydrogen storage; however, these technologies need to be analyzed as they apply to an actual site. The physical infrastructure and hydrogen use cases for the Port will be analyzed, and a risk assessment for compressed hydrogen, liquified hydrogen, and Liquid Organic Hydrogen Carrier (LOHC) storage will be performed. These risk assessments will be useful for understanding how each of these technologies would perform in terms of facility and public safety. The operating states of the proposed hydrogen systems at the Port will be analyzed and incorporated into the storage risk assessment. Scalability will also be analyzed to understand how future port uses would affect the overall risk assessment. Finally, using the risk assessment as a tool to inform engagement and to gain stakeholder acceptance will be explored.

08 HYDROGEN↗

DOE OSTI2025

CIE Curriculum Guide (V.2.0)

The Cyber-Informed Engineering (CIE) Curriculum Guide offers a comprehensive framework, guidance, and resources for integrating CIE into university-level engineering programs and related educational activities. The primary goal is to help educators adopt CIE principles into their teaching to produce future engineers and technicians who understand digital risks in modern engineered systems, thereby addressing the nation’s infrastructure resilience needs. This guide outlines practical integration examples, links to resources to accelerate CIE adoption, and shares insights from partner academic institutions on various implementation strategies. CIE is a framework for embedding engineered controls that mitigate the impact of cyber-attacks in any cyber-physical system used in critical energy infrastructure and other sectors. Developed by the U.S. Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER), the National Cyber-Informed Engineering Strategy emphasizes embedding CIE into formal education, training, and credentialing. This guide supports this strategic objective by providing examples of integrating CIE concepts into engineering curricula, from class activities to new courses and certificate programs. The importance of educating cyber-informed engineers is underscored by the evolving cybersecurity threats facing engineered systems. As industrial control systems (ICS) increasingly incorporate digital technologies, the responsibility for security extends to both cyber professionals and engineers. CIE addresses critical gaps in designing and protecting physical systems with digital components against cyber risks, ensuring engineers consider digital risk throughout the engineering design lifecycle. Currently, engineering education does not routinely include cyber-informed principles, highlighting a gap in addressing modern engineering system risks. This guide advocates for updating engineering curricula to include digital risk management as a fundamental element. By doing so, future engineers will be equipped to design resilient systems that mitigate digital risks from the outset. Through this guide, engineering faculty can integrate CIE into their curricula, bridging the gap between digital risk and engineering. This approach prepares a cyber-informed workforce capable of safeguarding the cyber-physical systems crucial to national security and public welfare. By embedding CIE into education and training, institutions can produce engineers and technicians who can effectively mitigate cyber impacts throughout the engineering design lifecycle, resulting in more secure critical infrastructures.

42 - ENGINEERING↗

DOE OSTI2023

Emulation and Adversarial Analysis of EV Charging Networks

In the effort of decarbonization and evolution of the modern electrical grid, electric vehicles (EVs) play a key part to transform the grid. However, due to the rapid adoption of EVs and the demand of the charging infrastructure required to power said EVs, risk of a cyber-attack may impose serious consequences. There is a need to analyze and protect the charging ecosystem infrastructure from cyber threats before it reaches wide-scale deployment. In an effort to secure vehicle to grid (V2G) communications, standardization is necessary for continued reliable system operation. The protocol ISO 15118 outlines controls and practices that should be implemented for secure vehicle to grid (V2G) communications. The standard is gaining momentum for American markets as the demand for EV infrastructure grows. The adoption of ISO 15118 in American markets poses several challenges: the deployment of a public key infrastructure (PKI) as outlined within the standard, interoperability of charging different EVs with chargers from different manufactures using the PKI, and scaling the ecosystem to meet the demand while managing risks. This project was created to understand potential cyber and scaling challenges of PKI for EV infrastructure through utilizing a series of emulated components mapping to what exists in the EV ecosystem today, and the components of the PKI that are under development. The key nodes within the emulation that are under development are: electric vehicle (EV), electric vehicle supply equipment (EVSE), charge network operator (CNO), certificate authority (CA), and online certificate status protocol (OCSP) that must all interact using secure and trusted communications. With these emulated components and utilizing orchestration methods to rapidly deploy and scale the components, the ability to analyze risks of the ecosystem and address gaps before the PKI ecosystem is fully deployed to production should yield a more robust and mature production charging infrastructure. Our approach will use a modular architecture of virtual machines within an orchestration platform and will target scales of 100s, 1000s, and 10,000s of entities interacting. The core research questions trying to be answered with this scope of work are: what are the impacts of a rogue CA, what are the risks of certificate revocation list (CRL) management, what is the value of OCSP stapling, what components are vulnerable to DOS attacks, and what test effective payloads may impact the components.

charging ecosystem↗

DOE OSTI2022

Dynamic risk assessment for geologic CO 2 sequestration

At a geologic CO 2 sequestration (GCS) site, geologic uncertainty usually leads to large uncertainty in the predictions of properties that influence metrics for leakage risk assessment, such as CO 2 saturations and pressures in potentially leaky wellbores, CO 2 /brine leakage rates, and leakage consequences such as changes in drinking water quality in groundwater aquifers. The large uncertainty in these risk-related system properties and risk metrics can lead to over-conservative risk management decisions to ensure safe operations of GCS sites. The objective of this work is to develop a novel approach based on dynamic risk assessment to effectively reduce the uncertainty in the predicted risk-related system properties and risk metrics. We demonstrate our framework for dynamic risk assessment on two case studies: a 3D synthetic example and a synthetic field example based on the Rock Springs Uplift (RSU) storage site in Wyoming, USA. Results show that the U.S. National Risk Assessment Partnership’s Open Source Integrated Assessment Model (NRAP-Open-IAM) coupled with a conformance evaluation can be used to effectively quantify and reduce the uncertainty in the predictions of risk-related system properties and risk metrics in GCS.

58 GEOSCIENCES↗

DOE OSTI2025

Activity-based Informed Curtailment: Using Acoustics to Design and Validate Smart Curtailment to Reduce Risk to Bats at Wind Farms

Rapid expansion of renewable energy infrastructure is a key part of any global strategy to reduce the pace and severity of anthropogenic climate change, although the potential impacts of renewable energy infrastructure on wildlife are also becoming increasingly apparent. Bats appear vulnerable to population-level impacts from the cumulative effect of turbine-related fatalities at commercial wind energy facilities in North America, particularly as the industry continues to expand to meet renewable energy generation targets. Turbine curtailment is the most widely used and consistently effective method to reduce bat fatality rates and involves pitching turbine blades parallel to prevailing winds to restrict turbine rotation when turbines would otherwise be operating and capable of producing power. Recognizing the need to expand the wind industry while managing risk to bats highlights the need to understand and manage turbine-related impacts to bats more aggressively and strategically than the current use of blanket curtailment allows.

17 WIND ENERGY↗

DOE OSTI2020

Facility Cybersecurity Framework Best Practices

Federal facilities are increasingly adopting automation and connecting to the Internet creating an energy-internet-of-things environment that converges operational technology (OT) and information technology (IT). Today's buildings increasingly weave together networked sensors and cyber and physical systems that enable data to be collected, aggregated, exchanged, stored and monetized in new ways. Building technological advances have created new energy technology, services, markets and value creation opportunities (e.g. transactive energy, two-way grid communications, machine learning, and increased use of renewable and distributed energy resources). But as larger data sets are being exchanged at faster speeds between an increasing number of OT systems, it becomes more difficult to protect the security of the data lifecycle and the physical equipment it interacts with. These challenges are especially difficult to overcome because the economic and environmental gain (interoperability, big data, social networks and ubiquitous information sharing) are driving these prominent trends in the digital age. Often cybersecurity is an afterthought. The U.S. Department of Energy’s (DOE) Federal Energy Management Program (FEMP) funded the Pacific Northwest National Laboratory (PNNL) to develop various cybersecurity tools, trainings, and reports to aid federal facility managers – and other building owners and operators – in better applying frameworks and lessons learned from the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), risk management framework (RMF), DOE’s cybersecurity capability maturity model (C2M2), and a wide variety of industry best practices and guidance documents (i.e., NIST 800 series, Department of Defense United Facilities Criteria). This set of tools, collectively known as the FEMP Facility-Related Control System Cyber Toolkit (FRCS Cyber Toolkit)2, is focused on cybersecurity concerns from facility-related control systems and other operational technology (OT), such as industrial control systems (ICS). The FRCS Cyber Toolkit can be applied across six of the sixteen critical infrastructure sectors designated by the Department of Homeland Security, including government facilities, healthcare and public health, commercial facilities (e.g., public assembly, offices, lodging), financial services (e.g., banking and insurance), emergency services (e.g., fire and police stations), and information technology. With increasingly converged IT and OT systems, it is crucial to address OT cybersecurity considerations and assess how the seam of these two systems could impact the overall cybersecurity posture of a facility. The objective of this report is to provide an overview of the best possible method to use FRCS Cyber Toolkit (section 2.0) and distilled cybersecurity best practices for the federal facilities to address growing non-linear cyber threats (section 3.0). Recommendations in this document are aggregated from several NIST and other documents (see Appendix A for additional details).

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2022

Risk Communications and Risk Mitigation

This topical report summarizes risk communications and risk treatment (a.k.a. mitigation) aspects of risk management workflow for the Southwest Regional Partnership on Carbon Sequestration (SWP) Phase III Demonstration Project, located near the community of Farnsworth in northernmost Texas. Detail on risk communications previously provided in an internal project report is summarized here, while detail on risk treatment is presented for the first time. A principal message is that the effective development and execution of risk treatments depends on effective communications among project staff. Farnsworth Project relied primarily on internal communications; in contrast, projects that also rely heavily on public approval will be relatively more dependent upon effective information sharing with external stakeholders. The report documents work undertaken for Tasks 7.4.2 and 7.4.3 of U.S. Department of Energy

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2023

Assessing Solar Cybersecurity: Questions for States to Ask Electric Utilities

To help State Energy Officials and Public Utility Commissions engaging investor-and consumer-owned utilities and the solar industry in topical discussions about their cybersecurity practices and priorities in general, and for interconnected solar systems, specifically, this report outlines discussions prompts for these discussions. By using the questions in this tool states can explore aspects of utilities’ cybersecurity risk management programs that target solar devices, systems, and communication pathways. Such discussions help states identify cybersecurity gaps and assist in emergency response planning, as well as general risk awareness.

14 SOLAR ENERGY↗

DOE OSTI2023

Enabling site-specific well leakage risk estimation during geologic carbon sequestration using a modular deep-learning-based wellbore leakage model

Geologic carbon sequestration (GCS) is a promising technology for mitigating net carbon emissions and growing climate concern by storing CO 2 in reservoirs. Oil and gas brownfields are an attractive option for CO 2 storage, but these sites have many historical wellbores from petroleum production and can be a potential leakage pathway for CO 2 or formation brine. Therefore, risk management of GCS operations requires an assessment of potential well leakage. Due to the high uncertainty of the system, stochastic approaches are ideal for quantifying the range of risk behaviors, but they must be computationally efficient in the face of complex physics. Here, we develop a new physics-centric deep learning wellbore model to predict the leakage of CO 2 and brine through leaky wellbores. Multi-physics numerical simulations were used to generate data sets, and physics-informed features were introduced. Neural networks were optimized with an automated searching algorithm. Feature analysis quantifies the impact of each feature on model prediction and confirms the role of physics-inspired parameters. The model shows high predictive performance across a wide range of geologic and injection conditions and well attributes. In conclusion, a case study illustrates how the model is applied to assess well leakage in GCS operations.

58 GEOSCIENCES↗

DOE OSTI2022

The Press and Pulse of Climate Change: Extreme Events in the Colorado River Basin

Extremes in temperature and precipitation are associated with damaging floods, prolonged drought, destructive wildfires, agricultural challenges, compromised human health, vulnerable infrastructure, and threatened ecosystems and species. Often, the steady and progressive trends (or presses) of rising global temperature are the central focus in how climate impacts are described. However, observations of extreme weather events (or pulses) increasingly show that the intensity, duration and/or frequency of acute events are also changing, resulting in greater impacts on communities and the environment. Describing how the influence of extreme events may shape water management in the Colorado River Basin in clear terms is critical to sound future planning and efforts to manage risk. Three scenario planning workshops in 2019 and 2020 were held as part of a Colorado River Conversations series, identifying potential impacts from multiple intersecting extreme events. Water managers identified climate-related events of concern in the Colorado River Basin that necessitate greater attention and adaptive responses. To support efforts to include consideration of climate-change-driven extremes in water management and planning, we explore the current state of knowledge at the confluence of long-term climate shifts and extreme weather in the Colorado River Basin related to the events of concern that were identified by scenario planning participants.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2020

National-Tribal Critical Infrastructure Protection: Collaboration for Extraordinary National Security Benefit

This paper examines national and tribal collaborative opportunities to get ahead of the critical infrastructure insecurity problem. Recommendations are viewed through the lens of the Sandia Labs Tribal Cyber-Energy initiative and national security projects. Recommendations include 1) Collaboratively address national priority and shared challenges to gain faster and better solutions to national priority problems on a smaller yet comprehensive American Indian and Alaskan Native sovereign single-point of authority scale 2) Utilize newer standards-based technologies to provide scalable, capable, and manageable solutions for greatly expanded and connected national critical infrastructures 3) Employ Cyber-Physical-Resilient design preliminary analysis to define concept- to-disposition design requirements for preemptive critical infrastructure risk mitigation and baked-in security; 4) Develop data-centric protection to provide increased information asset protection as data shifts from data-owner operated on-premises infrastructure to virtual service provider data-steward owned and operated off-premises infrastructure; and 5) Balance shared solutions with the National Institute of Science and Technology (NIST) Cybersecurity and Risk Management frameworks, and the System Security Engineering Guidelines. As yet unallocated federal funding would support research, development, the timely application of National-Tribal critical infrastructure protection, and critical infrastructure Cyber disruption response and recovery with extraordinary mutual benefits for the foreseeable future. The Critical Infrastructure Insecurity Problem: Rapid modernization and expansive connectivity are due to advances in Information and Communications Technologies that have sweeping cyber impact across all critical infrastructure sectors. Supervisory Control and Data Acquisition and Industrial Control Systems are particularly impacted as systems long separated from the Internet are now being connected and computerized. Virtualization and mobility create a Data Everywhere-User Anywhere paradigm that has evaporated the enterprise network perimeter. There are multi-front technological challenges at play, where long depended on technologies simply don't scale to current needs resulting in a digital dichotomy of competing old and new standards. New standards-based technologies scale but are not as well-known or as widely deployed, which leaves decision makers, stakeholders, and the workforce in a quandary, caught mid-stream between the technological past and the virtual future. Rapid and expansive cyber threat accompanies disruptive change in connectivity and computational dependencies. A lack of action will exacerbate the problem if new technologies roll out without baked-in security design. The Risk: If National-Tribal CIP collaboration to design in security is not done, then an ongoing state of insufficient bolt-on security and elevated threat exposure will remain for years to come.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗