Search NASA⌕ Search

SEARCH · Search NASA

Results for “probabilistic risk assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

Assessment and Control of Spacecraft Charging Risks on the International Space Station

The International Space Station (ISS) operates in the F2 region of Earth's ionosphere, orbiting at altitudes ranging from 350 to 450 km at an inclination of 51.6 degrees. The relatively dense, cool F2 ionospheric plasma suppresses surface charging processes much of the time, and the flux of relativistic electrons is low enough to preclude deep dielectric charging processes. The most important spacecraft charging processes in the ISS orbital environment are: 1) ISS electrical power system interactions with the F2 plasma, 2) magnetic induction processes resulting from flight through the geomagnetic field and, 3) charging processes that result from interaction with auroral electrons at high latitude. Recently, the continuing review and evaluation of putative ISS charging hazards required by the ISS Program Office revealed that ISS charging could produce an electrical shock hazard to the ISS crew during extravehicular activity (EVA). ISS charging risks are being evaluated in an ongoing measurement and analysis campaign. The results of ISS charging measurements are combined with a recently developed model of ISS charging (the Plasma Interaction Model) and an exhaustive analysis of historical ionospheric variability data (ISS Ionospheric Specification) to evaluate ISS charging risks using Probabilistic Risk Assessment (PRA) methods. The PRA combines estimates of the frequency of occurrence and severity of the charging hazards with estimates of the reliability of various hazard controls systems, as required by NASA s safety and risk management programs, to enable design and selection of a hazard control approach that minimizes overall programmatic and personnel risk. The PRA provides a quantitative methodology for incorporating the results of the ISS charging measurement and analysis campaigns into the necessary hazard reports, EVA procedures, and ISS flight rules required for operating ISS in a safe and productive manner.

Koontz, Steve↗

Risk of Bone Fracture due to Spaceflight-induced Changes to Bone

The Human Research Program (HRP) is taking a biomechanical approach to assessing subsequent fracture risk in active astronauts as a consequence of spaceflight exposure. Triennial testing of active and retired astronauts continues as Space Medicine monitors for a premature diagnosis of primary osteoporosis, which is associated with age-related bone loss and skeletal fragility. This updated 2023 Fracture Evidence Report has expanded the description of skeletal changes to capture the full effects of spaceflight on bone: • Recent analysis of fractures from health records of the full astronaut cohort, suggests an increased incidence rate of hip and spine fractures in astronauts following longer spaceflight duration flights compared to incident rates found in shorter duration flights. • Routine preflight-to-postflight surveillance by DXA (dual-energy x-ray absorptiometry) does not provide the full detection of loss and recovery in the long-duration (LD) astronaut nor the full recovery of hip trabecular bone. • The inclusion of hip quantitative computed tomography (QCT) in flight studies delineates effects of spaceflight, of countermeasures, and of post-flight recovery on cortical and trabecular bone parameters—some of which are verified predictors of hip fracture in the aged. • QCT detects and compares the distinct countermeasure effects of the pharmaceutical alendronate and of resistive exercise (on the Advanced Resistive Exercise Device, ARED) in specific cortical and trabecular bone sub-regions during spaceflight. • A published comparison of QCT-determined loss rates of hip trabecular bone in LD astronauts compared to terrestrial cohorts suggest that accelerated loss rates in trabecular volumetric BMD (vBMD) during spaceflight might be analogous to skeletal effects of accelerated loss rates in females due to menopause, potentially leading to disruptions in trabecular microarchitecture. • A dataset of finite element (FE) estimates of hip bone strength in aging terrestrial cohorts (spanning astronaut age-range) provides comparative context for changes in the FE of hip bone strength in LD astronauts, including comparison (force unit of newton) to percentiles (50th, 75th, and 100th) of sex-matched aged humans with hip fractures. • Risk of fracture, due to the mechanical overloading of bones, is being updated with IMPACT, the next-generation tool suite for probabilistic risk assessment (PRA) for exploration missions being created by the Exploration and Medical Capability Element (ExMC) at NASA. IMPACT is currently in development and will not be included in this 2024 update. The risk for fracture necessitates understanding the relationship between applied loads to bone and the biomechanical competence of bone. The Risk for Early Onset Osteoporosis focuses on the weakened condition of bone (including development of new technologies, measurements of novel skeletal attributes, translation of multiple measures to an index of bone fragility, and interpretations of data used to reflect a weakened bone), while the Risk for Fracture assesses factors that influence the probability an astronaut would encounter applied loads exceeding the biomechanical competence of bones, resulting in fracture. This Evidence Report combines the research gaps and tasks associated with both risks.

Fracture↗

A framework to implement human reliability analysis during early design stages of advanced reactors

Nuclear power plants require human actions throughout their lifecycle from design, construction, operation, and decommissioning. However, for advanced reactors (e.g., Generation IV), the reliance on human intervention in safety-related actions is expected to be reduced or completely replaced by automated actions. The Probabilistic Risk Assessment (PRA) Standard for Advanced Non-LWR Nuclear Power Plants requires that the impacts of all operator actions are captured and incorporated in the risk of the modeled plant. Moreover, the Modernization of Technical Requirements for Licensing Advanced Reactors requires human reliability analysis (HRA) to be included throughout all design and PRA development stages. However, due to the lack of details during the early design stages, HRA is often postponed until the design is mature enough. Conducting HRA in later design stages, though it may be adequate in capturing pre-, at-, and post-initiators comes short of informing the design itself in the iterative design lifecycle. Hence, this paper presents a framework to include HRA during the design's early stages, pre-conceptual or conceptual. The proposed framework provides a process for the removal of operator actions that do not contribute to the risk and the identification of all key operator actions that are critical to the safety of the design. The results of this framework are then used to inform the design of those safety-related operator actions to update the design further. Then, using information from the updated design, this framework can be reapplied to investigate the impact of the design update on human reliability. The PRA model of the X-energy's pre-conceptual Xe-100 high-temperature gas-cooled pebble-bed reactor (HTGR-PB) design is used to demonstrate the approach. In the pre-conceptual Xe-100 PRA model, also called Phase 0 PRA model, human actions were considered an integral part of analyzing the plant response to different initiating events. Hence, in this paper, all possible human actions in the Xe-100 PRA model are identified, analyzed, and removed to emulate a design relying only on the available automated control systems. The preliminary results of this assessment show how safe the Xe-100 design is even without crediting any human actions. The results also list necessary sequences in which operator actions are critical to the risk profile of the design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

The research challenges in security and safeguards for nuclear fission batteries

This paper discusses the nuclear security and safeguards research challenges presented by the development and deployment of nuclear fission batteries. These are defined as easily transportable and deployable nuclear systems which are designed to operate either unattended or autonomously. We start by defining the current landscape of domestic and international safeguards and security and discuss how it can be affected by the introduction these new nuclear systems. We then specifically discuss the technology gaps and technologies to be developed to facilitate their practical deployment. We find that, as expected, we can leverage conclusions from existing security and safeguards studies for small modular rectors and develop bespoke target set analyses to inform security postures based on probabilistic risk assessment. We find also that specific fission battery security economic analysis tools are needed and security by design must be applied early. However, the most important finding is that these new systems will require a new comprehensive set of cyber tools covering transportation, installation, operation, maintenance security of the fission battery systems. Altogether, we find that the development of the necessary security and safeguards requirements at the design phase of such a technology will be of great benefit in the smooth deployment of this modern nuclear energy system.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Analytical Solutions for Seismic Fluid-Structure Interaction of Head-Supported Cylindrical Tanks

Fluid-structure interaction (FSI) of earthquake shaking is a design consideration in the civil, nuclear, chemical, and mechanical industries. Preliminary sizing of structures and components in these industries will often use analytical solutions because there is insufficient information to warrant the analysis of numerical models. Here, this study extends prior analytical work on seismic FSI of base-supported tanks in the 1980s to accommodate head-supported tanks with geometries similar to those proposed for new-build, liquid (fluid)-filled, advanced reactors. Analytical solutions are derived for flexible, head-supported, cylindrical tanks subjected to small-amplitude, unidirectional, horizontal seismic motion, and address frequencies of lateral motions of the tank, hydrodynamic pressures, frequencies of waves, wave heights, and reactions at the head support. Solutions are presented for a range of tank dimensions and could be used for a) preliminary design of head-supported cylindrical tanks and their supporting structures with idealized seismic input, and b) verification of numerical models to be used for final seismic analysis, design, and probabilistic risk assessment.

42 ENGINEERING↗

Dynamic PRA-Based Estimation of PWR Coping Time Using a Surrogate Model for Accident Tolerant Fuel

In this study, we propose an interpolation-based response surface surrogate methodology to manage a large number of scenarios in dynamic probabilistic risk assessment. It adopts the shape Dynamic Time Warping algorithm to cluster the interpolation neighborhood from time series sample data. The interpolation method was adapted from Taylor Kriging to allow a reduced-order model of the Taylor series. In order to demonstrate its applicability to complex issues in risk assessment for nuclear engineering, an example risk response surface to estimate emergency core cooling system (ECCS) criteria for triplex silicon carbide (SiC) accident-tolerant fuel was constructed. The response surface was exploited to estimate the cumulative failure probability of the fuel cladding structure due to the uncertainties in operator actions and safety systems. The functional failures were assessed based on a combination of individual layer failures computed by coupling Risk Analysis Virtual Environment software with a pressurized water reactor 1000-MW(electric) RELAP5 model and the in-house fuel performance assessment module. Results showed that SiC cladding failure probability spiked less than 1 min after a large-break loss-of- coolant accident whenever the current ECCS criteria for Zircaloy-4 (Zr-4) cladding was used. However, it still provides an increased safety margin of three orders of magnitude compared to Zr-4. This positive margin could be utilized to relax active ECCS requirements by allowing deviations of up to 450 s in its actuation time. The proposed surrogate methodology generated a response surface of SiC cladding failure probability reasonably well, with a significant savings of computation time. This methodology is expected to be useful in the analysis of system response with complex uncertainty sources.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

On the Language of Reliability: A System Engineer Perspective

In its classical definition, risk is defined by three elements: what can go wrong, what are its consequences, and how likely is it to occur? While this definition makes sense in a regulatory-based framework where for the current fleet of operating light water reactors (LWRs), the risks associated with nuclear power plants typically are characterized in terms of core damage and large early release frequency (LERF), this approach does not provide a useful snapshot of the health of the plant from a broader perspective. This is due to the very narrow context in which the term “risk” typically is defined as nuclear safety aspects that have the potential to impact public health. In this paper, we take the viewpoint of nuclear safety that is reflective of the current fleet of operating LWRs for which core damage frequency and LERF are appropriate metrics. For other advanced reactor designs, other more applicable technology neutral metrics of reactor safety metrics would be specified. A possible alternate path would start by redefining the word risk with a broader meaning that better reflects the needs of a system health and asset management decision-making process. Rather than asking how likely an event could occur (in probabilistic terms), we can ask how far this event is from occurring. Our approach starts by defining and quantifying component and system health in terms of a “distance” between its actual and limiting conditions, i.e., determination of the margin that exists between the current state/condition and the state where the component/system is no longer capable of achieving its intended function. A margin is a measure that is more reflective of the current state or performance of a component, and therefore more closely tied to decisions that are made on an ongoing basis. Further, we will show how, given the data available from plant equipment reliability and monitoring (e.g., pump vibration data) and prognostic (e.g., component remaining useful life estimation) data, a margin can be described and determined for all types of maintenance approaches (e.g., corrective or predictive maintenance). We show how classical reliability models (e.g., fault trees) can be used to quantify the system margin provided component margin values. In the approach described in this paper, the propagation of margin values through classical reliability models are not performed using classical probabilistic calculations applied to sets (as performed in a typical plant probabilistic risk assessment). Instead, we show how it is possible to propagate margin values through Boolean logic gates (i.e., AND and OR operators) through distance-based operations.

97 MATHEMATICS AND COMPUTING↗

Hierarchical Estimation For Planetary Protection

The software uses Bayes' theorem to describe the probability of an event based on prior knowledge of conditions that might be related to the event. The purpose of Bayesian analysis is to determine posterior probabilities based on prior probabilities where new information can be used in the decision-making process as additional data is gathered. The software will be used in Probabilistic Risk Assessments (PRAs) related to the Europa Clipper mission, which is one of NASA’s top priorities. Ultimately, the mission entails sending the Europa Clipper spacecraft to Jupiter’s Europa moon to orbit the planet and collect data for research and development. Europa is the smallest of the four Galilean moons orbiting Jupiter and is believed by researchers to be the most promising place to look for present-day environments suitable for life. Europa is thought to have an iron core, a rocky mantle, and a salt-water ocean covered by an ice-layered surface.

Gribok, Andrei [Idaho National Laboratory (INL), I↗

Structures, Systems, and Components Classification Criteria for the Versatile Test Reactor

The Versatile Test Reactor (VTR) is a fast spectrum test reactor currently being developed in the United States under the direction of the US Department of Energy (DOE), Office of Nuclear Energy. The VTR mission is to enable accelerated testing of advanced reactor fuels and materials required for advanced reactor technologies. The conceptual design of the 300 MWth sodium-cooled metallic-fueled pool-type fast reactor has been led by the U.S. National Laboratories in collaboration with General Electric-Hitachi and Bechtel National Inc. As part of the VTR authorization process by the DOE, it is necessary to identify the safety classification of structures, systems, and components (SSCs) to determine the proper design, surveillance, operation, and incident-reporting requirements. Since VTR is utilizing a risk-informed, performance-based authorization process based on the Licensing Modernization Project (LMP) described in NEI 18-04 [1], the criteria for SSC classification, which are reviewed here, includes both risk information from the probabilistic risk assessment (PRA) and prescriptive requirements.

Grabaskas, David↗

Development of Dry Cask Risk Tools

The Nuclear Regulatory Commission (NRC) has repeatedly expressed a desire to increase the use of risk in its decision-making. The Probabilistic Risk Assessment (PRA) Policy Statement published in 1995 formalized the Commission’s commitment to risk-informed regulation through the expanded use of PRA. While a great deal of work has been done to incorporate risk insights into the regulatory framework for at-power nuclear reactors. Far less progress has been made to risk inform the dry-casks and nuclear waste transportation areas of the nuclear fuel cycle. INL was tasked with incorporating the information from the two completed dry cask PRAs as well as any additional available information into a tool that helps the NRC use those insights to identify levels of risk at various stages in the nuclear waste cycle. The first task was to address the License Amendment Request (LAR) Process for Dry Cask storage, the second task is for the incorporate transportation into the tool, and the third and final task will be incorporate any additional regulatory applications for dry cask storage. This report covers the first task of the tool and will eventually incorporate the remaining two tasks may be completed in the future and built off the model described here. Task 1 specifically asked to incorporate the risk insights into the process for determining and prioritizing review of license amendment changes related to storage applications by outlining a resource allocation strategy and defining recommendations of for the depth and breadth of the LAR review. It was requested that the tool be similar in design to the SDP notebooks/worksheets and contain quantitative, qualitative, or semi-quantitative approaches to assessing the risk of the change. The final tool that was selected by INL to be developed was a flowchart and associated rationale document that allows the reviewer to quickly assess potential LAR changes and their associated risks as well as the rationale behind the risk categorization. This risk categorization will lead to specific actionable recommendations to expect from a change of that specific category. This allows for a more consistent review process as well as improving the overall efficiency of the review itself.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Technical and Licensing Considerations for Micro-Reactors

The U.S. Nuclear Regulatory Commission (NRC) has interacted with vendors pursuing the commercialization of micro-reactors (i.e., reactors capable of producing about 1 MW(th) to 20 MW(th) of energy from nuclear fission). It is envisioned that micro-reactors could be assembled and fueled in a factory and shipped to a site. Many of the sites are expected to be remote locations requiring off-grid power or in some cases military bases. The objective of this effort is to explore the technical issues and the approach required to reach a finding of "reasonable assurance of public health and safety" for this new and different class of reactors. The analysis performed here leverages available micro-reactor design and testing data available from national laboratory experience as well as commercial design information to explore technical issues. Some factors considered include source term, accidents that would need to be analyzed, and the extent of the probabilistic risk assessment (PRA). The technical evaluation was performed within the framework of the Licensing Modernization Project (LMP) to identify licensing basis events, classification of structures, systems and components, and defense-in-depth needed to provide regulatory certainty. With this framework and technical evaluation in mind, the scope and content of a micro-reactor licensing application is discussed.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Enhanced Component Performance Study: Emergency Diesel Generators 1998–2018

This report presents an enhanced performance evaluation of emergency diesel generators (EDGs) at U.S. commercial nuclear power plants. This report evaluates component performance over time using (1) Institute of Nuclear Power Operations (INPO) Consolidated Events Database (ICES) data from 1998 through 2018 and (2) maintenance unavailability (UA) performance data from Mitigating Systems Performance Index (MSPI) Basis Document data from 2002 through 2018. The objective is to show estimates of current failure probabilities and rates related to EDGs, trend these data on an annual basis, determine if the current data are consistent with the probability distributions currently recommended for use in NRC probabilistic risk assessments, show how the reliability data differ for different EDG manufacturers and for EDGs with different ratings; and summarize the subcomponents, causes, detection methods, and recovery associated with each EDG failure mode. Engineering analyses were performed with respect to time period and failure mode without regard to the actual number of EDGs at each plant. The factors analyzed are: sub-component, failure cause, detection method, recovery, manufacturer, and EDG rating. A statistically significant increasing trend was identified in the frequency of FTLR demands for emergency power system (EPS) and high pressure core spray (HPCS) EDGs and a statistically significant decreasing trend was identified in the frequency of run > 1H hours for EPS and HPCS EDGs.

99 GENERAL AND MISCELLANEOUS↗

Risk Importance Ranking of Fire Data Parameters to Enhance Fire PRA Model Realism

Fire is historically and analytically a significant contributor to nuclear power plant risk. The level of fire risk and the methods, tools and data for modeling this risk is highly debated by experts. One area of debate is the input data used in fire modeling and how to deal with this data’s high uncertainty. This report outlines initial work performed for determining the key parameters causing this uncertainty and how it propagates into nuclear power plant models. This research paves the way for the development of methods to reduce fire data uncertainty used in modeling. The Nuclear Regulatory Commission has mandated that nuclear power plants perform fire risk modeling. However, there are several issues with the current risk modeling implementation that affect the results. Approved modeling methods can be overly conservative and often do not match plant experience. Also, the data used in the modeling can have high uncertainties and is influenced by expert judgement. To evaluate input data uncertainty, researchers performed an initial review of several fire experiments done at Sandia National Laboratories. Uncertainties for fire data can come from many sources, such as experiment design constraints, environmental conditions, or other plant-specific aspects. There are many different significant and insignificant parameters driving the uncertainty. Additionally, the uncertainty of the different input data used in the fire modeling could have a significant or insignificant effect on the entire plant risk. A four-step methodology was developed to perform Integrated Probabilistic Risk Assessment Importance Ranking. A demonstration case using these steps was set up and three of the four steps were completed in fiscal year (FY) 2019 and the fourth step done FY 2020. These steps are: 1. The qualitative analysis of potential sources was conducted with the following items identified for the demonstration. • Maximum heat release rate • Time to maximum heat release rate • Duration of max heat release rate • Time to decay • Thermal conductivity of concrete • Specific heat of concrete • Density of concrete • Cable jacket thickness 2. A quantitative characterization of dominant sources of uncertainty was performed. A list of distributions and determined values of the dominant sources is shown in Appendix A. 3. A quantitative screening of the potential sources of uncertainty using Morris Elementary Effects Analysis was completed. An experimental model using the physics-based fire modeling tool Fire Dynamics Simulator was developed and coupled with the Risk Analysis Virtual Environment. The Morris analysis identified at least two parameters that can be eliminated as significant contributors (specific heat of concrete and cable jacket thickness). 4. Global importance measure (Global IM) analysis to generate a comprehensive ranking based on their influence on the plant risk. In this research, a moment-independent Global IM is used since it can address (a) uncertainty in the input parameters of the fire model, (b) uncertainty in the risk outputs, and (c) non-linearity and interactions among input parameters in the fire model, more accurately than the correlation-based and variance-based global methods. The observations from the research showed that, depending on the initial and boundary conditions of the fire scenarios, fire-induced damage could have a very small probability and could be dominated by the tail of the uncertainty distribution; hence, the accuracy of the correlation-based and variance-based methods is questionable. The moment-independent Global IM analysis in this research provides a better understanding of how experimental uncertainty data affects industry’s plant models and where improvements in that data will have the largest benefit for improving fire modeling accuracy in causing core damage. Among the five unscreened parameters obtained from the Morris EE analysis, the Global IM analysis results for the case study indicated that max heat release rate and fire location are the most important parameters. The report also outlines benefits of using a unified computational platform that integrates the underlying simulations (e.g., a fire progression model), quantitative screening (using the Morris EE method), and the Global IM analysis. A unified platform can (i) facilitate the ranking of input parameters considering multiple key fire scenarios simultaneously, rather than considering one scenario at a time, (ii) contribute to more explicit and accurate treatment of dependencies at multiple levels of Fire PRA, (iii) facilitate the sampling-based uncertainty quantification for Fire PRA, and (iv) help generating both “industry-wide” and "plant-specific" ranking of uncertainty sources in Fire PRA. Future research should be done to include additional parameters such as detection/suppression or cable fire spread. Adding a PRA software such as SAPHIRE to the RAVEN platform would help with plant model integration and improve treatment of fire-induced dependency. The I-PRA risk importance ranking methodology offered in this report can provide valuable information for efficiently (a) enhancing the realism of Fire PRA for existing plants and (b) supporting the development of Dynamic Fire PRA for advanced reactors and new plants.

97 MATHEMATICS AND COMPUTING↗

ADETS User Manual

ADETS (Automated DEpletion Transport System) calculates coupled neutronic/isotopic results for nuclear systems and produces a large number of criticality and burnup results based on various material feed/removal specifications, power(s), and time intervals. ADETS is a fully automated tool that links the LANL MCNP Monte Carlo transport code with the SCALE system, specifically ORIGEN-ARP (radioactive decay and burnup code). Additionally, ADETS can compute the dose at various distances of the reactor using a point gamma source, whose characteristics are computed by ORIGEN-ARP. In addition, ADETS is fully coupled with the Uncertanty Quantification, Probabilistic Risk Assessment, Parameter Optimization and Data Analysis code RAVEN (developed at the Idaho National Laboratory as well). RAVEN is released with ADETS but MCNP and SCALE (ORIGEN-ARP) are not included.

42 ENGINEERING↗

Risk-Informed ATF and FLEX Analysis for an Enhanced Resilient BWR Under Design-Basis and Beyond-Design-Basis Accidents

This report documents the activities performed by the Idaho National Laboratory (INL) during fiscal year (FY) 2020 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk-Informed System Analysis (RISA) Pathway, Enhanced Resilient Plant (ERP) Systems research. The purpose of the RISA Pathway research and development is to support plant owner-operator decisions with the aim to improve the economics, reliability, and maintain the high levels of safety of current nuclear power plants over periods of extended plant operations. The concept of ERP refers to the combinations of accident-tolerant fuel (ATF), optimal use of diverse and flexible coping strategy (FLEX), enhancements to plant components and systems, and the incorporation of augmented or new passive cooling systems, as well as improved fuel cycle efficiency. The objective of the ERP research effort is to use the RISA methods and toolkit in industry applications, including methods development and early demonstration of technologies, in order to enhance existing reactors’ safety features (both active and passive) and to substantially reduce operating costs through risk-informed approaches to plant design modifications to the plant and their characterization. One main focus of the FY 2020 efforts documented in this report was to extend the analyses conducted in FYs 2018 and 2019 for a pressurized water reactor (PWR) to a boiling water reactor (BWR). The same analysis process, risk analysis approaches, and analysis tools as in the previous work for PWR were used for a generic BWR with near-term ATF cladding (i.e., Iron-Chromium-Aluminum [FeCrAl] cladding and Chromium [Cr]-coated cladding) designs under the postulated station blackout (SBO) and medium loss-of-coolant (MLOCA) accident scenarios. In addition, a FLEX model was developed and incorporated into a generic BWR probabilistic risk assessment (PRA) model using the INL-developed software tool, Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE), to assess the risk impact from FLEX. The other main focus of the FY 2020 efforts was to advance analysis methods, including developing dynamic approach for FLEX human reliability analysis (HRA) using the INL-developed software tool, Event Modeling Risk Assessment using Linked Diagrams (EMRALD), as well as developing a multicriterion benefit evaluation (MCBE) method for evaluating costs and benefits of safety enhancements in nuclear power plants (NPPs). As a case study, the MCBE method was applied to evaluate the costs and benefits brought by FLEX implementation.

99 GENERAL AND MISCELLANEOUS↗

Industry Level Integrated Fire Modeling Using Fire Risk Investigation in 3D (FRI3D)

The software Fire Risk Investigation in 3D (FRI3D) has been developed over the last 2 years to integrate 3D spatial modeling with existing fire probabilistic risk assessment (PRA) models and fire simulation codes. The goal of this research and development is to automate many of the fire analysis manual tasks to reduce industry efforts in the initial fire modeling and operational costs for the model maintenance and evaluations required during normal plant operations. The tasks for Fiscal Year (FY) 2021 include first testing the FRI3D modeling capabilities by importing an industry fire model into FRI3D and making a 3D model of a complex/high-risk significant area. (For this work, the switchgear room was chosen.) Then, the second task of FY 2021 is to develop a dynamic fire PRA process that can help optimize traditional fire PRA models. The switchgear room model will be used for the dynamic fire PRA work. This report describes the work and insights learned when using FRI3D software to model both a Nuclear Regulatory Report (NUREG) example models and a full industry switchgear room.

97 MATHEMATICS AND COMPUTING↗

Evaluation of Joint Cyber/Safety Risk in Nuclear Power Systems

This report presents an analysis of the Emergency Core Cooling System (ECCS) for a generic Boiling Water Reactor (BWR)-4 NPP. The Electric Power Research Institute (EPRI) developed Hazards and Consequences Analysis for Digital Systems (HAZCADS) process is applied to the ECCS and its subsystems to identify unsafe control actions (UCAs) which act as possible cyber events of concern. The analysis is performed for two design basis events: Small-break Loss of Coolant Accident (SLOCA) and general transients (TRANS), such as unintended reactor trip. In previous work, HAZCADS UCAs were combined with other cyber-attack analysis to develop a risk-informed approach; however, this was for a single system. This report explores advanced systems engineering modeling approaches to model the interactions between digital assets across multiple systems which may be targeted by cyber adversaries. The complex and interdependent design of digital systems has the potential to introduce emergent cyber properties that are generally not covered by hazard analyses nor formal nuclear Probabilistic Risk Assessment (PRA). The R&D and supporting analysis presented here explores approaches to predict and manage how interdependent system properties effect risk. To show the potential impact of a successful cyber-attack to formal PRA event tree probabilities, HAZCADS analysis was also used. HAZCADS was also used to model the automatic depressurization system (ADS) automatic actuation. This analysis extended to an integrated system analysis for common-cause failure (CCF). In this aspect, the HAZCADS analysis continued by analyzing plant design details for system connectivity in support of critical plant functions. A dependency matrix was developed to depict the integrated functionality of the interconnected systems. Areas of potential CCF are indicated. Future work could include adversary attack development to show how CCF could be caused, resulting in PRA events. Across the multiple systems that comprise the ECCS, the analysis shows that the change in such probabilities was very different between systems. This indicates that some systems have a larger potential risk impact from successful cyber-attack or digital failure, which indicates a need for these systems to have a higher priority for design and defensive measures. Furthermore, we were able to establish that a risk analysis using any arbitrary threat model establishes an ordering of components with regard to cyber-risk. This ordering can be used to influence the overall system design with an eye to lowering risk, or as a way to understand real-time risk to operational systems based on a current threat landscape. Expert knowledge of both the analysis process and the system being analyzed is required to perform a HAZCADS analysis. The need for a tiered risk analysis is demonstrated by the results of this report.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Utilization of the LMP Methodology in Support of the VTR Conceptual Safety Design Report

The Versatile Test Reactor (VTR) is a fast spectrum test reactor currently being developed in the United States under the direction of the US Department of Energy (DOE), Office of Nuclear Energy. The VTR is utilizing a risk-informed performance-based (RIPB) approach for design support and authorization by the DOE, derived from recent efforts by the US industry led Licensing Modernization Project (LMP). This document contains an overview of the implementation of the LMP approach in support of the VTR Conceptual Safety Design Report (CSDR). The work reported here is the result of studies supporting a VTR conceptual design, cost, and schedule estimate for DOE-NE to make a decision on procurement. As such, it is preliminary. The VTR RIPB authorization approach utilizes information from the probabilistic risk assessment (PRA), coupled with deterministic analyses, to aid in decision-making regarding the identification and categorization of safety basis events (SBEs), the classification of structures, systems, and components (SSCs), and the evaluation of defense-in-depth (DID) adequacy. As part of initial reactor design efforts, a VTR conceptual design PRA was developed to support the RIPB process, which focused on at-power internal events, with scoping analyses for seismic and sodium fire hazards. In addition to supporting numerous design studies, preliminary results from the RIPB approach and the VTR conceptual design PRA were utilized as the basis of the VTR CSDR. The initial identification and categorization of SBEs, SSC classification, and DID evaluation were contained within the CSDR, which was submitted to DOE in 2019 as part of the CD-1 submittal package. Following review, DOE approved the CSDR in April 2020 and the CD-1 package in late 2020. Valuable experience was gained through the implementation of the RIPB approach for design and authorization during the VTR conceptual design phase, which is summarized in this document. To the extent possible, this experience has been shared with the advanced reactor industry, through publications and participation in licensing tabletops, in addition to informing DOE:NE advanced reactor regulatory development efforts. Furthermore, the approval of the CSDR by the DOE as part of CD-1 represents a significant milestone in the use of RIPB approaches for advanced reactor licensing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗