Search NASA⌕ Search

SEARCH · Search NASA

Results for “SECURITY MANAGEMENT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

Overview and Commentary on Applying the Coordinated Vulnerability Disclosure Process to Photovoltaic System Devices

The rapid expansion of photovoltaic (PV) systems, particularly inverters, has introduced new cybersecurity challenges that threaten both local operations as well as the broader electrical grid’s stability. PV inverters, integrated into critical energy infrastructure are potential targets for cyber attacks due to vulnerabilities in firmware, remote access systems, and communication protocols. The Coordinated Vulnerability Disclosure (CVD) process, as defined by the Cybersecurity and Infrastructure Security Agency (CISA), provides a framework for identifying, reporting, and addressing these vulnerabilities in a transparent and collaborative manner. This report outlines the CVD process as it applies to PV systems, detailing the roles of key stakeholders, such as manufacturers, grid operators, and security researchers. The report also highlights specific challenges in managing vulnerabilities for new and legacy PV systems, which includes those introduced by insecure communications and third-party supply chain components. By adhering to the CVD process, the PV industry can mitigate cybersecurity risks, ensure regulatory compliance, and maintain consumer trust, while safeguarding the operational resilience of the energy grid. Ultimately, the effective coordination of vulnerability management is crucial for securing the future of PV systems within the critical electric grid infrastructure landscape.

14 SOLAR ENERGY↗

System-Level Integration of Modular Language Models for Real-Time Risk Assessment in Third-Party Risk Management Systems

Large enterprises typically rely on dedicated teams to govern and implement security measures throughout their supply chains, ensuring compliance with enterprise security procedures. There is a significant reliance on Third-Party Risk Management (TPRM) platforms, which often require complete, highly structured information from potential vendors. The review and compliance assurance processes are time- and labor intensive, often requiring several rounds of review between the supply chain security risk management teams, business users, and potential vendors, leading to delays in the supply chain processing and consumer experience. Significant challenges in the risk management paradigm include handling unstructured data in various formats and providing real-time feedback to users to reduce the required review time. This paper presents a novel solution to these challenges. A modular multi-step system architecture is proposed using advances in language processing, specifically for unstructured responses and provides real-time feedback (i.e., 3 seconds) so that users can improve their responses before the TPSRM team review. This novel system architecture will increase information accuracy and significantly reduce time and labor during the review process.

99 - GENERAL AND MISCELLANEOUS↗

Australian Safeguards and Non-Proliferation Office Visit: Nuclear Nonproliferation and Security Program at LANL [Slides]

The Laboratory’s nuclear nonproliferation and security portfolio is managed by the GS-NNS program office: NNSA’s Defense Nuclear Nonproliferation office (DNN) makes up ~80% of our work. We also support State Dept activities closely aligned with our work for DNN and NASAprograms. Our work is executed across the entire Laboratory, approximately half in the Global Security directorate and a third in the Weapons Program.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Nevada National Security Site 2019 Data Report: Groundwater Monitoring Program Area 5 Radioactive Waste Management Site

This report presents groundwater and leachate sample results from the Area 5 Radioactive Waste Management Site (RWMS) at the Nevada National Security Site in Nye County, Nevada. Since 1993, groundwater samples have been collected and static water levels have been measured from the aquifer immediately below the Area 5 RWMS. The data are evaluated for evidence of effects on the aquifer related to the Area 5 RWMS. Leachate from the Cell 18 lined mixed waste cell has been sampled since 2011, and leachate from the Cell 25 lined mixed waste cell was first sampled in 2019 after it began receiving waste in August 2018. Leachate data are analyzed for hazardous contaminants to determine appropriate leachate handling and disposal. This report includes five years of data from 2015 through 2019.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

NEVADA NATIONAL SECURITY SITE 2020 DATA REPORT- GROUNDWATER MONITORING PROGRAM AREA 5 RADIOACTIVE WASTE MANAGEMENT SITE

This report presents groundwater and leachate sample results from the Area 5 Radioactive Waste Management Site (RWMS) at the Nevada National Security Site in Nye County, Nevada. Since 1993, groundwater samples have been collected and static groundwater depths have been measured from the aquifer immediately below the Area 5 RWMS. The data are evaluated for evidence of effects on the aquifer related to the Area 5 RWMS. Leachate from the Cell 18 lined mixed waste cell has been sampled since 2011, and leachate from the Cell 25 lined mixed waste cell was first sampled in 2019 after it began receiving waste in August 2018. Leachate data are analyzed for hazardous contaminants to determine appropriate leachate handling and disposal. This report includes five years of data from 2016 through 2020.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Aggregation and Grid Security Workshop Report

The Aggregation and Grid Security Workshop - held on June 17-18, 2025, National Laboratory of the Rockies (NLR) in Golden, Colorado - brought together approximately 40 external stakeholders from the energy sector, including VPP owner/operators, aggregators, OEMs, utilities, testing & certification labs, trade associations, and cybersecurity vendors. Led by key facilitators, the workshop focused on addressing cybersecurity challenges and enhancing grid resilience for aggregated Distributed Energy Resources (DERs) and Virtual Power Plants (VPPs). The workshop was catalyzed by recognition that traditional, rearward-looking regulatory frameworks are insufficient to keep pace with technological change. There is a "missing understanding" of risk, an "absent security basis" for managing it, and an "untenable responsibility" due to unclear ownership and requirements. The workshop aimed to shift the mindset from reacting to past crises to proactively preparing for emerging threats, fostering forward resilience through risk simulation and collaborative action. This report summarizes the outcomes of the workshop, marking it a significant step toward a secure, reliable and affordable energy future.

14 SOLAR ENERGY↗

Integration of the NCRC Database and Other INL Databases

The Nuclear Computational Resource Center provides a portal by which industry professionals, educational staff, students, national laboratory employees, and others may request access to certain engineering software tools. As the tools provided through the Nuclear Computational Resource Center portal are not open-source and freely available, a set of approvals are necessary before access is granted. All code recipients must be associated with an institution that has a license with Idaho National Laboratory for the code requested. Information about these licenses is controlled by Idaho National Laboratory’s Technology Deployment organization and housed in a Technology Deployment database. Those requesting code access who are not citizens of the United States must also have a security plan, mandated by Idaho National Laboratory policy. Security plans are managed by the International Access Program and are stored in an International Access Program database known as IFacts. Granting access to software thus depends on information stored in the Technology Deployment database and IFacts. In the past, no connection between the Nuclear Computational Resource Center portal and these databases existed, making checking the status of license agreements and security plans time consuming and error prone. This report demonstrates that the Nuclear Computational Resource Center portal now connects to both the Technology Deployment database and IFacts, greatly improving the ease of use of the Nuclear Computational Resource Center system for administrators, which leads to a better overall experience for those requesting code access.

99 GENERAL AND MISCELLANEOUS↗

Data Driven Analysis for Modernization Program Management

NNSA is responsible for managing national nuclear security missions: ensuring a safe, secure, and reliable nuclear deterrent; supplying nuclear fuel to the Navy; and supporting the nation’s nuclear nonproliferation efforts. However, over half of NNSA’s facilities are more than 40 years old, and roughly one-third date back to the Manhattan Project. To execute its critical nuclear security missions, NNSA is making large investments to modernize its nuclear production capabilities. This ramp up represents NNSA’s largest modernization effort since the Cold War. Given the scale of these efforts, NNSA’s Office of Secondary Stage Production Modernization has implemented data driven techniques to prioritize investments and inform strategic decision making. NNSA, with support from its site managing contractors, has developed and implemented an integrated schedule and risk management system to address the issues and limitations with the traditional approach. The multi-year integrated schedules are key to identifying program linkages and managing large portfolios comprised of many different projects and efforts. In conjunction with the integrated schedule, a new program risk management system has also been developed and implemented, which manages program risks and opportunities, along with specific mitigation strategies to reduce or eliminate the risks per timelines that are tracked in the integrated schedule. This paper is supplemented with a follow-on presentation on effective management of program material and throughput modeling.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Supplier Research & Analysis Approach

"The implementation of NASA GSFC's portfolio of mission projects relies upon inter-connected, multi-tiered supply chains of organizations operating under direct and indirect contracts and other agreements throughout the U.S. and around the world. These supply chains are subject to an inter-related array of technical/production, business, market and security risks that are amplified by the ongoing globalization of industry and technology and which can disrupt or threaten the production and delivery of products and services when needed and in conformance with requirements. In recognition of such risks and associated challenges, GSFC's SMA directorate launched an innovative Supplier Research and Analysis (SRA) capability three years ago to gain greater insight into the operating environment, performance, capabilities and viability of current and prospective suppliers for GSFC projects and proposals. The capability uses business intelligence techniques and primarily open source information resources as part of a cost-effective, non-intrusive methodology to produce several types of research and analysis reports. The reports are based on a holistic analytical framework encompassing key technical/production, business enterprise management, market and security factors, and feature in-depth information, summary information profiles, SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis, and candidate risk concerns in order to pro-actively support SMA and project management needs. The SRA capability, which is designed to complement and support ongoing SMA/project management activities and practices, has produced over 95 reports since its start-up in early 2015. This presentation addresses the approach, methodology and performance of the Supplier Research and Analysis (SRA) capability and its value in assuring the success of NASA mission projects. In doing so, the presentation provides lessons-learned, best practices, case examples and address how it fits into the development of an enterprise-level Supply Chain Risk Management capability."

supplier research and analysis↗

Supply Chain Research and Analysis for Space Systems

The implementation of NASA GSFC's portfolio of mission projects relies upon inter-connected, multi-tiered supply chains of organizations operating under direct and indirect contracts and other agreements throughout the U.S. and around the world. These supply chains are subject to an inter-related array of technical/production, business, market and security risks that are amplified by the ongoing globalization of industry and technology and which can disrupt or threaten the production and delivery of products and services when needed and in conformance with requirements. In recognition of such risks and associated challenges, GSFC's SMA directorate launched an innovative Supply Chain Research and Analysis capability three years ago to gain greater insight into the operating environment, performance, capabilities and viability of current and prospective suppliers for GSFC projects and proposals. The capability uses business intelligence techniques and primarily open source information resources as part of a cost-effective, non-intrusive methodology to produce several types of research and analysis reports. The reports are based on a holistic analytical framework encompassing key technical/production, business enterprise management, market and security factors, and feature in-depth information, summary information profiles, SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis, and candidate risk concerns in order to pro-actively support SMA and project management needs. The SRA capability, which is designed to complement and support ongoing SMA/project management activities and practices, has produced over 105 reports since its start-up in early 2015.This presentation addresses the approach, methodology and performance of the Supply Chain Research and Analysiscapability and its value in assuring the success of NASA mission projects. In doing so, the presentation provides lessons-learned, best practices, case examples and address how it fits into the development of an enterprise-level Supply Chain Risk Management capability.

supply chain risk management↗

Grid Communications: Digital Assurance and Supply Chain Challenges and Emerging Regulation Session Two

The TADA Grid Communications Workshops are designed to strengthen cybersecurity and digital assurance across the energy sector by focusing on secure deployment and management of grid communications technologies. These workshops bring together state energy offices, utilities, and technology suppliers to explore the intersection of communications infrastructure, supply chain risks, and emerging regulatory requirements. Participants will apply Cyber-Informed Engineering (CIE) principles to reduce risks in communications systems, engage with INL’s procurement guidance, and explore future tools. Through scenario-based exercises and peer exchange, attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their grid communications projects. The workshops also help participants navigate evolving regulatory frameworks such as FEOC rules in the OBBB, NERC CIP-013, and NDAA 2024, while identifying compliance gaps in mixed-technology environments. A key outcome is the formation of a practitioner network with ongoing access to INL expertise and resources, fostering long-term resilience in the digital energy ecosystem. This is Session 2 of 3 (Full Version).

29 - ENERGY PLANNING, POLICY AND ECONOMY↗

Grid Communications: Cybersecurity and Supply Chain Challenges and Emerging Regulation Session Three

The TADA Grid Communications Workshops are designed to strengthen cybersecurity and digital assurance across the energy sector by focusing on secure deployment and management of grid communications technologies. These workshops bring together state energy offices, utilities, and technology suppliers to explore the intersection of communications infrastructure, supply chain risks, and emerging regulatory requirements. Participants will apply Cyber-Informed Engineering (CIE) principles to reduce risks in communications systems, engage with INL’s procurement guidance, and explore future tools. Through scenario-based exercises and peer exchange, attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their grid communications projects. The workshops also help participants navigate evolving regulatory frameworks such as FEOC rules in the OBBB, NERC CIP-013, and NDAA 2024, while identifying compliance gaps in mixed-technology environments. A key outcome is the formation of a practitioner network with ongoing access to INL expertise and resources, fostering long-term resilience in the digital energy ecosystem. This is Session 3 of 3 (Full Version).

29 - ENERGY PLANNING, POLICY AND ECONOMY↗

Grid Communications Supply Chain & Emerging Regulation Challenges Session 1

The TADA Grid Communications Workshops are designed to strengthen cybersecurity and digital assurance across the energy sector by focusing on secure deployment and management of grid communications technologies. These workshops bring together state energy offices, utilities, and technology suppliers to explore the intersection of communications infrastructure, supply chain risks, and emerging regulatory requirements. Participants will apply Cyber-Informed Engineering (CIE) principles to reduce risks in communications systems, engage with INL’s procurement guidance, and explore future tools. Through scenario-based exercises and peer exchange, attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their grid communications projects. The workshops also help participants navigate evolving regulatory frameworks such as FEOC rules in the OBBB, NERC CIP-013, and NDAA 2024, while identifying compliance gaps in mixed-technology environments. A key outcome is the formation of a practitioner network with ongoing access to INL expertise and resources, fostering long-term resilience in the digital energy ecosystem.

29 - ENERGY PLANNING, POLICY AND ECONOMY↗

Two-Stage Optimization Framework for Detecting and Correcting Parameter Cyber-Attacks in Power System State Estimation

One major tool of Energy Management Systems for monitoring the status of the power grid is State Estimation. Since the results of state estimation are used within the energy management system, the security of the state estimation process is most important. The focus research in this area is on detecting False Data Injection attacks on measurements. While this is important, State Estimation also rely on database that are used to describe the relationship between measurements and systems' states. This paper presents a two-stage programming framework to detect and correct attacks in the parameters of the measurement model used by the state estimation process in the Energy Management System. In the first stage, an estimate of the line parameters ratios are obtained. In the second stage, the estimated ratios from stage I are used in a Bi-Level model for obtaining a final estimate of the measurements' model parameters. Hence, the presented framework does not only unify the detection and correction in a single optimization run, but also provide a monitoring scheme for the SE database that is typically considered static. In addition, in the two stages, linear programming framework is preserved. For validation, the IEEE 118 bus system is used for implementation. The results of this paper illustrate the effectiveness of the proposed model for detecting attacks in the database used in the state estimation process.

state estimation, two-stage optimization, cyber-ph↗

FOURTH QUARTER / ANNUAL TRANSPORTATION REPORT FISCAL YEAR 2021

Waste Shipments to and from the Nevada National Security Site, Radioactive Waste Management Complex. This report satisfies the U.S. Department of Energy (DOE) commitment to prepare a quarterly summary of waste shipments to the Nevada National Security Site (NNSS) Radioactive Waste Management Complex (RWMC) in Area 5.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Restoration Hydro: A Watershed Approach to Standard Modular New Hydropower

The objectives of FOA DE- FOA-0001836- “Standard Modular Hydropower” included designing a standardized, modular, and environmentally compatible hydropower schematic for implementation in greenfield sites that generate up to 10 MW of capacity. Utilizing funds competitively awarded under DOE’s Water Power Technologies Office, the Natel Energy team developed a concept for modular new stream reach (NSR) hydropower that incorporates multi species upstream and downstream fish passage, improved river channel connectivity, and recreational modules. The in-stream design of the collective modules minimized site specific design and maximized the opportunities for modularity. Financial data was also presented using actual costs from regional suppliers, with figures provided in 2022 dollars. While the project team did not address potential permitting process improvements, the site selection criteria did consider established barriers to hydropower development such as tribal and preserved lands, interconnection proximity, and endangered species to exclude or deprioritize. The project’s design schematic met the objectives of the FOA, and presented a unique solution that targets alluvial pockets as natural features for sustainable development. Natel’s concept also incorporated the company's fish-safe Restoration Hydro Turbine for safe downstream passage, while featuring a rock arch that integrates fish passage, water, recreation, and grade control modules (including sediment). Alignment with the Department of Energy Office of Energy Efficiency and Renewable Energy (EERE) “Innovative Design Concepts for Standard Modular Hydropower and Pumped-Storage Hydropower” Program: According to the Hydropower Vision (DOE, 2016), approximately 16 GW of hydropower growth is possible with the development of technology solutions that balance efficiency, economics, and environmental sustainability. The desired outcome of the SMH program is transformational innovation specifically in the site identification, conceptual, and detailed design phases of technology development lifecycles (DOE, 2018). In developing the SMH design schematic, the team aimed to address the opportunities outlined in the Vision through an inverted design philosophy; rather than singularly prioritizing efficiency and power production, the team focused on integrating hydropower with restoration of degraded streams to optimal ecosystem function and provision of exceptional recreation value as design criteria. To achieve this, Restoration Hydro incorporates the principles of nature-based engineering (WWAP, 2018) and biomimicry (Biomimicry NL.) to strategically deploy complementary combinations of permanent, semi-permanent, and ephemeral low-head structures - such as natural and engineered log jams - that harness geomorphological and hydrological processes at the landscape-scale. Primary applications of Restoration Hydro include: 1) restoration of degraded watersheds’ natural ecological function and enhancement of hydrological connectivity; and 2) creation of associated co-benefits to hydro production, including increased groundwater recharge, improved sediment transport and management, improved water security and water quality. Restoration Hydro projects build upon proven watershed restoration engineering techniques by integrating hydropower turbines into low-head structures using innovative and evolving civil works concepts that facilitate fish and sediment passage, and in some cases create additional revenue-generating recreational opportunities. Powering low-head structures creates a directly monetizable layer of economic value in the form of flexible, reliable, renewable energy on top of the already high-value water, environmental and recreational benefits of watershed and river restoration. The approach aims to create a virtuous, self-reinforcing cycle whereby Restoration Hydro projects support the scaling of ecosystem restoration activities, creating a water-energy-carbon multiplier effect that, through the principles of adaptive change management: 1) improves the resilience of landscapes and downstream population centers for changing hydrological cycles; 2) creates a reliable energy resource that facilitates the integration of intermittent renewable power sources into grids; and 3) supports climate change mitigation through grid decarbonization and enhanced ecosystem carbon capture and retention.

13 HYDRO ENERGY↗