Quantifying Risk Reduction Achieved by OT Security Controls
Quantifying Risk Reduction Achieved by OT Security Controls
SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Quantifying Risk Reduction Achieved by OT Security Controls
Market conditions are forcing fossil electricity generation facility owners and operators to implement advanced digital technologies. These technologies enable efficiencies, operational flexibility, operations and maintenance efficiencies, and adapting to a transitioning workforce. These digital technologies, however, can increase the cybersecurity attack surface. The purpose of this research was to develop a holistic cybersecurity risk reduction framework for fossil generation facilities. The framework begins with assessing how cyber risk changes across facility life cycles, including plant, system, vendor, and business life cycles. The next phase performs consequence analysis to prioritize high consequence events. Focusing on high consequence events allows owners to use a graded, risk-informed approach to prioritize cybersecurity efforts. The final phase identifies the digital asset attack surface in sensors and instrumentation and control equipment. After the vulnerabilities are identified, the owner selects mitigating cybersecurity control measures (or countermeasures) based on the risk analysis from the previous phases. This report describes the current industry cybersecurity best practices in fossil generation that are based on the first principles for cybersecurity engineering. The report is divided into five sections that describe the implementation of the risk reduction framework and present identified research, methodological, and technology gaps that were identified through this course of research and development.
Market conditions are forcing fossil electricity generation facility owners and operators to implement advanced digital technologies. These technologies enable efficiencies, operational flexibility, operations and maintenance efficiencies, and adapting to a transitioning workforce. These digital technologies, however, can increase the cybersecurity attack surface. The purpose of this research was to develop a holistic cybersecurity risk reduction framework for fossil generation facilities. The framework begins with assessing how cyber risk changes across facility life cycles, including plant, system, vendor, and business life cycles. The next phase performs consequence analysis to prioritize high consequence events. Focusing on high consequence events allows owners to use a graded, risk-informed approach to prioritize cybersecurity efforts. The final phase identifies the digital asset attack surface in sensors and instrumentation and control equipment. After the vulnerabilities are identified, the owner selects mitigating cybersecurity control measures (or countermeasures) based on the risk analysis from the previous phases. This report describes the current industry cybersecurity best practices in fossil generation that are based on the first principles for cybersecurity engineering. The report is divided into five sections that describe the implementation of the risk reduction framework and present identified research, methodological, and technology gaps that were identified through this course of research and development.
Market conditions are forcing fossil electricity generation facility owners and operators to implement advanced digital technologies. These technologies enable efficiencies, operational flexibility, operations and maintenance efficiencies, and adapting to a transitioning workforce. These digital technologies, however, can increase the cybersecurity attack surface. The purpose of this research was to develop a holistic cybersecurity risk reduction framework for fossil generation facilities. The framework begins with assessing how cyber risk changes across facility life cycles, including plant, system, vendor, and business life cycles. The next phase performs consequence analysis to prioritize high consequence events. Focusing on high consequence events allows owners to use a graded, risk-informed approach to prioritize cybersecurity efforts. The final phase identifies the digital asset attack surface in sensors and instrumentation and control equipment. After the vulnerabilities are identified, the owner selects mitigating cybersecurity control measures (or countermeasures) based on the risk analysis from the previous phases. This report describes the current industry cybersecurity best practices in fossil generation that are based on the first principles for cybersecurity engineering. The report is divided into five sections that describe the implementation of the risk reduction framework and present identified research, methodological, and technology gaps that were identified through this course of research and development.
This report is a final deliverable for project 81966: Scaling Up: Demonstrating Risk Reduction and Cost Compression for Commercial Heat Pump Water Heaters (CRADA 625) Commercial heat pump water heater (CHPWH) systems can significantly improve the energy efficiency of service water heating (SWH), aka domestic hot water (DHW), in commercial and multifamily buildings but have not yet achieved widespread adoption due to pricing, complexity, and perceived risk factors. The goal of this project – Scaling Up: Demonstrating Risk Reduction and Cost Compression for Commercial HPWHs (Scaling Up) – was to demonstrate and validate a holistic systems approach for CHPWHs that de-risks the technology, creating a reliable, cost-effective, and repeatable approach to CHPWH deployment.
This report provides a set of best practices in response to Section 4(d) of Executive Order 14308, Empowering Commonsense Wildfire Prevention and Response. The information contained herein is expected to be used in conjunction with other materials at the Federal Energy Regulatory Commission Wildfire Risk Mitigation Technical Conference (Docket No. AD25-16-000), with possible direction to the North American Electric Reliability Corporation to take action. The objective of this report is to provide an overview of existing and emerging best practices currently employed or planned by utilities for wildfire mitigation, demonstrating how these efforts align with the executive order’s emphasis on reducing electric utility–caused wildfires while also balancing cost-effectiveness. Additionally, while most practices in utility-developed wildfire mitigation plans focus on risk reduction through robustness and operational reliability, this report also discusses best practices for resilience. The best practices are adopted from publicly available utility wildfire mitigation plans from the United States and Canada, recent findings from wildfire risk reduction research, and industry engagement.
This 20-minute presentation highlights uncertainty and technical risk reduction capabilities in CCSI2, especially intrusive methods: model-based design of experiment and robust optimization.
On February 19-20, the Center for Global Security Research (CGSR) at Lawrence Livermore National Laboratory (LLNL) hosted a workshop titled “Nuclear Risk Reduction in an Era of Major Power Rivalry.” This session brought together participants drawn across the policy, military, and technical communities. Among the participants, there were experts from allied countries in Europe and the Asia-Pacific region, as well as experts from Russia and China.
Hydrogen component reliability and the hazard associated with failure rates is a critical area of research for the successful implementation and growth of hydrogen technology across the globe. The research team has partnered to quantify system risk reduction through earlier detection of hydrogen component failures. A model of hydrogen dispersion in a hydrogen equipment enclosure has been developed utilizing experimentally quantified hydrogen component leak rates as inputs. This model provides insight into the impact of hydrogen safety sensors and ventilation on the flammable mass within a hydrogen equipment enclosure. This model also demonstrates the change in safety sensor response time due to detector placement under various leak scenarios. The team looks to improve overall hydrogen system safety through an improved understanding of hydrogen component reliability and risk mitigation methods. This collaboration fits under the work program of IEA Hydrogen Task 43 Subtask E Hydrogen System Safety.
The U.S. DOE and the Electric Power Research Institute convened a wildfire advisory group to bring together knowledge of ignition risks, electric utility needs, the applicability of available technology, and existing technology gaps. The outcome is a five-year action plan, containing recommendations on RD&D projects, that if completed by the year 2030, may accelerate the power industry’s ability to substantially reduce wildfire ignition risks. When reviewing this document please consider it is a snapshot in time for the years 2023 and 2024, could be obsolete by the end of the decade. The following list comprises the titles and topics for the proposed follow-on demonstrations: 1. Hybrid Undergrounding RD&D, 2. Live Downed Conductor Detection RD&D, 3. Fault Energy Reduction RD&D, 4. Advanced Inspection and Response Drone, 5. Fault and PQ Event Signature Repository, 6. Advanced and Intelligent Sensor Nodes, 7. Fire Friendly Asset Coatings and Coverings, and 8. Environmental Monitoring Action Plan.
In the current security environment, the most likely wars for which the US and its allies must be prepared are wars against nuclear-armed states. Such wars bring unique risks of both vertical and horizontal escalation. Some are “accepted risks;” for example, the US may choose to escalate a conflict to clarify its commitment to an issue and defend its interest. Other are “unacceptable risks;” especially, the risk of miscalculation by the U.S. or an adversary. The focus here is on this latter category. Miscalculation is an error of judgment—the failure to accurately assess a situation. Miscalculation can result from hidden, incomplete, or ambiguous information, or from inaccurate processing of available information because of bias, overconfidence, denial, delusion, etc. Miscalculation is related to misperception. For some, they are synonymous. This paper characterizes the risks of miscalculation and introduces a discussion of a risk mitigation strategy.
The safety and durability of Class VI wells are critical for geological carbon sequestration (GCS). However, current GCS operations face unique challenges: unlike traditional Class II wells, Class VI CO 2 injection wells operate at rates up to 100 times higher, dramatically increasing the risk of wellbore leakage and structural compromise due to severe temperature drops and associated mechanical stresses. Despite existing guidelines on material selection, there remains a substantial gap in understanding how rapid CO 2 injection rates, low surface temperatures, and variable reservoir conditions interact to threaten long-term well integrity. This study presents a comprehensive, original workflow integrating advanced analytical and numerical models for both well flow and well integrity analysis. By systematically simulating a wide range of field-relevant scenarios—including variations in injection rate, CO 2 temperature, and reservoir pressure—this work provides the first cross-validated assessment of cooling effects on wellbore. The results reveal that extreme temperature drops, up to 60 °C, can occur under high injection rates, particularly in depleted reservoirs, significantly increasing the risk of cement failure. Building on these insights, the study proposes innovative, practical well design and operational strategies, including ductile cement formulations, pre-stressing techniques, advanced insulation coatings, and proactive management of injection rates. The safety of Class VI well extends beyond simply using CO 2 resistant materials. Cement materials should possess optimal thermo-hydraulic-mechanical-chemical properties for effective performance. This work provides a scientific basis for optimizing Class VI well designs, with direct benefits for minimizing environmental risk, lowering operational costs, and enhancing the long-term reliability of GCS.
Commercial heat pump water heater (CHPWH) systems significantly decarbonize the commercial and multifamily sectors by eliminating the reliance on gas-fired water heating. CHPWH systems are also well suited to include load shift controls that enable load-up and shed commands for supporting grid reliability and time-of-use pricing structure. However, they have not had wide adoption due to factors including price, complexity, and perceived risk. Although CHPWHs have been available in the US for decades, they have not made significant market gains in part because the systems have required significant and costly engineering design expertise and proved lackluster performance. Successful widespread market adoption requires a different approach; a shift from the current custom specialized expertise project design and installation to a repeatable approach that requires little specialized knowledge or expertise and can deliver persistent performance. Using this type of holistic systems approach requires effectively integrating four CHPWH system key components: primary air-to-water heat pumps; primary thermal storage tanks, a temperature maintenance system, and a control system which has capabilities to manage the primary heat pump cycles, any back-up, supplemental, or temperature maintenance heating, alarms, and grid connectivity allowing for demand response (DR), and/or load shifting. The project team has developed and will implement a suite of tools to support faster, less expensive, and more reliable field installations of CHPWH technology and with the resulting data used to further improve the tool set. These tools include: (1) A tool for optimizing system size and costs. (2) A tool that predicts annual energy use and overall system efficiency. (3) The Advanced Water Heater Specification (AWHS 8.0) defining the components of a full CHPWH system addressing performance requirements by climate zone. (4) The Qualified Products List: (QPL) of approved products that meet the specifications requirements. (5) Training materials including online on-demand modules, instructor-led training, and virtual interactive video tours of CHPWH installations in multifamily buildings. Demonstration site identification in low-income buildings in underserved communities is currently underway. Preliminarily, the team anticipates having three demonstrations in the Pacific Northwest and three in the Northeast for a total of six sites. After the demonstration sites are finalized, and M&V instrumentation installations are complete, the team will gather performance data and confirm whether the CHPWH systems perform as predicted and use the data to improve the existing tools.
Since its founding in 1992, the Center for Global Security Research (CGSR) has had an abiding interest in nuclear threat reduction. In the 1990s it did some of the leading thinking about cooperative threat reduction with post-Soviet entities. In the early 2000s it focused increasingly on strengthening the nonproliferation regime. Since 2015 one of its primary interests has been exploring the future of cooperative strategies to reduce nuclear/strategic dangers. That future faces many challenges, both technical and geopolitical. By 2020, a rising sense of urgency of nuclear danger had clearly taken shape in the United States and internationally, driven in significant measure by the renewal of major power rivalry and potential military flashpoints among those powers. And that urgency has driven a rising national and international exploration of what can be done to reduce nuclear dangers.
Abstract not provided.
Understanding the lightning science behind the lightning detected by remote sensing systems is crucial to Sandia’s remote sensing program. Improved understanding of lightning properties can lead to improvements of onboard and/or ground-based background signal discrimination.
Abstract not provided.
Explore the source record for details and available documents.