Search NASA⌕ Search

SEARCH · Search NASA

Results for “SAFETY STANDARDS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Java Architecture for Detect and Avoid Extensibility and Modeling

Unmanned aircraft will equip with a detect-and-avoid (DAA) system that enables them to comply with the requirement to "see and avoid" other aircraft, an important layer in the overall set of procedural, strategic and tactical separation methods designed to prevent mid-air collisions. This paper describes a capability called Java Architecture for Detect and Avoid Extensibility and Modeling (JADEM), developed to prototype and help evaluate various DAA technological requirements by providing a flexible and extensible software platform that models all major detect-and-avoid functions. Figure 1 illustrates JADEM's architecture. The surveillance module can be actual equipment on the unmanned aircraft or simulators that model the process by which sensors on-board detect other aircraft and provide track data to the traffic display. The track evaluation function evaluates each detected aircraft and decides whether to provide an alert to the pilot and its severity. Guidance is a combination of intruder track information, alerting, and avoidance/advisory algorithms behind the tools shown on the traffic display to aid the pilot in determining a maneuver to avoid a loss of well clear. All these functions are designed with a common interface and configurable implementation, which is critical in exploring DAA requirements. To date, JADEM has been utilized in three computer simulations of the National Airspace System, three pilot-in-the-loop experiments using a total of 37 professional UAS pilots, and two flight tests using NASA's Predator-B unmanned aircraft, named Ikhana. The data collected has directly informed the quantitative separation standard for "well clear", safety case, requirements development, and the operational environment for the DAA minimum operational performance standards. This work was performed by the Separation Assurance/Sense and Avoid Interoperability team under NASA's UAS Integration in the NAS project.

unmanned aircraft systems↗

Preliminary Design of Critical Experiments Involving Commercially Available B 4 C Neutron Absorber Plates with Low-Enriched UO 2 Fuel

The International Criticality Safety Benchmark Evaluation Project (ICSBEP) is an initiative to provide high-quality benchmark data in a standardized format for criticality safety analysts to use to validate calculational tools and nuclear data. In the last released 2022 version, the ICSBEP handbook contains over 5,000 critical experiment descriptions, results, and associated models. This paper describes the critical configurations proposed and calculations performed as part of the conceptual design phase of Integral Experiment Request (IER) 554 (IER-554). The goal of IER-554 is to add to the benchmark experiments available to the criticality safety community by designing critical experiments that can analyze how adding commercially available Boralcan plates to an assembly of low-enriched UO2 fuel rods affects the effective neutron multiplication factor (k eff ). Boralcan, a neutron absorber product developed by Rio Tinto, is made of B4C in an Al 1100 matrix and is commonly used for criticality suppression in fuel storage pools. In the current version of the ICSBEP handbook, only a few dated critical experiments involve B4C materials, and none involve Boralcan in a thin plate shape. The experiments designed as part of IER-554 are intended to be performed at the Sandia Pulsed Reactor Facility/Critical Experiments (SPRF/CX) apparatus at Sandia National Laboratories. SPRF/CX is a well-characterized assembly considered trustworthy by the benchmarking community because of the numerous high-quality evaluations with very low experimental uncertainties included in the ICSBEP handbook. Figure 1 illustrates the assembly for a particular configuration from LCT-078, one of the published benchmarks in the ICSBEP handbook. The experiments will be moderated and reflected by light water at ambient atmospheric pressure. Before the plates are inserted in the critical assembly, they will be characterized with x-ray computed tomography (XCT) to identify the sizes and distribution of the B 4 C powder particles inside the plates. The preliminary design calculations were performed with SCALE 6.3.0 using the KENO V.a sequence for the criticality calculations, the CE-TSUNAMI-3D sequence for the sensitivity and uncertainty studies, and the ENDF/B-VII.1 Continuous Energy cross section library. All the calculation results presented have 10 pcm statistical uncertainties. A set of critical experiments with Boralcan plates could increase the confidence of the criticality safety community in its modeling methods when using this type of neutron absorber material. Experiments would also help validate k eff calculations, and the industry could use these validations to change the B loading credit limits from the US Nuclear Regulatory Commission standard review plan for dry cask storage of spent nuclear fuel. This paper summarizes only part of the analysis documented in the preliminary design report.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Assessing the Needs for Space Reactor Standards

A U.S. governmental interagency space reactor standards working group (SWG) was convened to address the limited availability of voluntary consensus standards currently in place specifically for space nuclear reactor design and safety. The SWG focused on reviewing existing standards, assessing agency needs, specifying gaps that could be addressed by new standards, and prioritizing those gaps through consensus group deliberations. The SWG identified a series of findings and recommendations relative to the development of space reactor standards, including moving three specific high-priority gap items to be pursued through a consensus standards development process: Safety and Risk Analysis Methods for Space Reactors, Testing Requirements for Space Reactors, including Facility Requirements, and Safe Operating Practices for Space Reactors.

Andrew Klein↗

Liquid Hydrogen Heavy-Duty Vehicle Safety Review and Refueling Facility Design

Liquid hydrogen (LH 2 ) used as a fuel onboard a heavy-duty vehicle can result in increased storage capacity and faster refueling relative to compressed gas. However, there are concerns about hydrogen losses from boil-off, potential safety issues, gaps in codes and standards for cryogenic hydrogen fuel, and technical challenges with LH 2 systems for widespread transportation applications. A failure modes and effects analysis (FMEA), a safety codes and standards review, and a design review of the onboard liquid hydrogen system for a heavy-duty vehicle identified some of these potential safety issues and gaps in the codes and standards. The FMEA identified some medium and low risk failure points of the conceptual design, and the design review identified how carefully pressure relief needs to be considered for LH 2 systems. In addition, a conceptual design for a LH 2 refueling station was developed. Rough capital costs for the refueling station design were $\$1 million$ and the layout occupied approximately 13,000 ft 2 . These results can be used to inform future designs and analyses for LH 2 heavy-duty vehicles.

08 HYDROGEN↗

Computing Q-D Relationships for Storage of Rocket Fuels

The Quantity Distance Measurement Tool is a GIS BASEP computer program that aids safety engineers by calculating quantity-distance (Q-D) relationships for vessels that contain explosive chemicals used in testing rocket engines. (Q-D relationships are standard relationships between specified quantities of specified explosive materials and minimum distances by which they must be separated from persons, objects, and other explosives to obtain specified types and degrees of protection.) The program uses customized geographic-information-system (GIS) software and calculates Q-D relationships in accordance with NASA's Safety Standard For Explosives, Propellants, and Pyrotechnics. Displays generated by the program enable the identification of hazards, showing the relationships of propellant-storage-vessel safety buffers to inhabited facilities and public roads. Current Q-D information is calculated and maintained in graphical form for all vessels that contain propellants or other chemicals, the explosiveness of which is expressed in TNT equivalents [amounts of trinitrotoluene (TNT) having equivalent explosive effects]. The program is useful in the acquisition, siting, construction, and/or modification of storage vessels and other facilities in the development of an improved test-facility safety program.

Jester, Keith↗

Advancing Electric Propulsion Aircraft Evaluation for Urban Air Mobility: Insights from NASA-Ames

This presentation delves into a recent evaluation conducted at NASA-Ames on the Vertical Motion Simulator, focusing on the handling qualities of Distributed Electric Propulsion VTOL (eVTOL) aircraft, specifically tailored for Urban Air Mobility (UAM) applications. The presentation will focus on the recent effort to adapt and refine use of the Aeronautical Design Standard -33 (ADS-33) rotorcraft handling qualities developed by the U.S. Army and NASA to meet the diverse needs of civilian (eVTOL) concept evaluation. A brief discussion of the author’s personal test pilot insights in the early development of military Fly-By-Wire evaluation methods will also be provided. The emergence of innovative eVTOL designs with unique lift capabilities and flight control systems, present both opportunities and challenges, particularly in ensuring safety amidst technological complexity. To navigate these challenges, our investigation examined evaluation criteria designed to accommodate the varied configurations and advanced automation systems inherent in modern eVTOL aircraft. By establishing a standardized approach to evaluation, our research not only fosters innovation but also upholds safety standards in the dynamic landscape of urban air mobility. Through this endeavor, we help to facilitate the seamless integration of novel aircraft capabilities into new operations, contributing to a new era of safe and efficient aerial transportation.

Loran Allen Haworth↗

Advancing Electric Propulsion Aircraft Evaluation for Urban Air Mobility: Insights from NASA Ames

This presentation delves into a recent evaluation conducted at NASA-Ames on the Vertical Motion Simulator, focusing on the handling qualities of Distributed Electric Propulsion VTOL (eVTOL) aircraft, specifically tailored for Urban Air Mobility (UAM) applications. The presentation will focus on the recent effort to adapt and refine use of the Aeronautical Design Standard -33 (ADS-33) rotorcraft handling qualities developed by the U.S. Army and NASA to meet the diverse needs of civilian (eVTOL) concept evaluation. A brief discussion of the author’s personal test pilot insights in the early development of military Fly-By-Wire evaluation methods will also be provided. The emergence of innovative eVTOL designs with unique lift capabilities and flight control systems, present both opportunities and challenges, particularly in ensuring safety amidst technological complexity. To navigate these challenges, our investigation examined evaluation criteria designed to accommodate the varied configurations and advanced automation systems inherent in modern eVTOL aircraft. By establishing a standardized approach to evaluation, our research not only fosters innovation but also upholds safety standards in the dynamic landscape of urban air mobility. Through this endeavor, we help to facilitate the seamless integration of novel aircraft capabilities into new operations, contributing to a new era of safe and efficient aerial transportation.

eVTOL↗

Autonomous Fueling System for Heavy-Duty Fuel Cell Electric Trucks

The motivation for this project stemmed from the challenges associated with rapidly refueling heavy-duty hydrogen fuel cell electric trucks (FCETs). Current manual refueling processes for fast refueling involve large, heavy equipment (e.g., hoses three times heavier than standard) and pose ergonomic risks and potential for equipment damage. The goal was to develop and test an autonomous fueling system to improve ergonomics, enhance safety, increase equipment durability through design improvements, and potentially speed up the fueling process. This project aimed to add to the understanding of autonomous systems in the context of heavy-duty hydrogen refueling, evaluating the technical effectiveness of potential concepts. A successfully developed system would benefit the public by facilitating the adoption of zero-emission heavy-duty transport, reducing reliance on manual labor for a physically demanding task, and potentially improving the safety and efficiency of hydrogen refueling infrastructure. The major accomplishment during the project's active period was the completion of the system-level architecture task. This involved establishing a detailed list of system requirements covering interfaces, environmental conditions, regulatory compliance, industry standards, safety, security, performance capabilities, and optional features. Five key use cases for the autonomous system were also identified. However, due to internal restructuring at Nikola, the necessary resources could not be allocated to continue the project. Consequently, Nikola opted to discontinue the project. The award was mutually terminated by Nikola and the DOE.

08 HYDROGEN↗

Range Flight Safety Requirements

The purpose of this NASA Technical Standard is to provide the technical requirements for the NPR 8715.5, Range Flight Safety Program, in regards to protection of the public, the NASA workforce, and property as it pertains to risk analysis, Flight Safety Systems (FSS), and range flight operations. This standard is approved for use by NASA Headquarters and NASA Centers, including Component Facilities and Technical and Service Support Centers, and may be cited in contract, program, and other Agency documents as a technical requirement. This standard may also apply to the Jet Propulsion Laboratory or to other contractors, grant recipients, or parties to agreements to the extent specified or referenced in their contracts, grants, or agreements, when these organizations conduct or participate in missions that involve range flight operations as defined by NPR 8715.5.1.2.2 In this standard, all mandatory actions (i.e., requirements) are denoted by statements containing the term “shall.”1.3 TailoringTailoring of this standard for application to a specific program or project shall be formally documented as part of program or project requirements and approved by the responsible Technical Authority in accordance with NPR 8715.3, NASA General Safety Program Requirements.

Flight↗

Standards Roadmapping for Mission Assurance in Commercial Spaceflight

This paper explores the application of established roadmapping approaches in standards planning and roadmap development to support mission assurance objectives. Mission assurance requires proactive planning across multiple domains including technical, schedule, cost, organizational, and policy. The intersection of these domains happens at the enterprise level, and enterprise systems engineering processes can systematically guide mission assurance activities, including development of standards roadmaps. Standards planning and development is a critical contributor to an effective mission assurance strategy, although standards are often developed and adopted reactively. Technology and standards planning is a key Enterprise Process Management activity, as identified by the Systems Engineering Body of Knowledge, and technology and standards roadmaps are strategic tools used to enable that process. Technology roadmapping has proven effective in guiding enterprise architecture and concept design, and standards planning supports enterprise requirements definition and management. However, there are limited methodologies to guide such standards planning activities. The application of technology roadmapping principles to standards planning formalizes the process and establishes a repeatable framework for standards development and integration. The framework development described in this paper fills a methodological gap by adapting proven roadmapping techniques to standards planning. Through a comparison of roadmapping methodologies and a case study analysis, this approach outlines a systematic process for anticipating and planning standards needs. In the case of developing a standards integration roadmap for NASA’s Office of Safety and Mission Assurance (OSMA), technology roadmapping principles were adapted to develop a roadmap framework to allow NASA and OSMA to define an agency-wide standards integration plan for commercial and industry safety and mission assurance standards. The outcome highlights key adaptations required for roadmapping in a standards context and describes the process steps to formalize a standards planning activity. The roadmapping framework adapted for standards development and integration enables more strategic, forward-looking standards planning and allows for better alignment between evolving capabilities and mission assurance requirements. Beyond its application to mission assurance, this methodology can be transferred to other domains requiring standards development, providing a systematic approach that integrates systems engineering principles into policy strategy and decision-making processes.

Enterprise Systems Engineering↗

Chapter 4: Aerospace Neurology

In the practice of medicine, the neurologist is called upon to answer the following questions: (1) Does the patient have neurologic disease? (2) If so, what is the localization of the lesion or lesions? (3) What is the pathophysiology of the process? (4) What is the preliminary differential diagnosis? Utilizing the tools of the neurologic and medical history, the neurologic examination, ancillary studies, and one’s education, training, and experience, the neurologist arrives at a diagnosis. The aerospace medicine physician (evaluator) has the additional challenge of relating the neurologic condition to aviation safety and achieving an appropriate aeromedical disposition. Whether it is the aviation medical examiner (AME), flight surgeon, or Federal Aviation Administration (FAA) regulator, the aerospace medicine physician shoulders the responsibility of a determination that may decide one’s career in aviation or spaceflight. Considering the individual, and yet preserving aerospace safety, is a never-ending challenge for the aerospace medicine physician. The evaluator has the dual responsibility of applying the standards and also considering exceptions to the standards in allowing waivers from standards, while assuring aerospace safety.

Joseph I Sirven↗

MARVEL 90% Final Design Report

This document provides documentation of the Microreactor Applications Research Validation and Evaluation Project’s (MARVEL) 90% Final Design, as required by U.S. Department of Energy (DOE) Standard-1189, “Integration of Safety into the Design Process." Per DOE-STD-1189-2016, the 90% Final Design documentation focuses on design completion, at a level capable of supporting procurement, construction, testing, and operation. At this phase, the design organization finalizes the hazards and accident analyses, Fire Hazard Analysis (FHA), security vulnerability assessments, and other supporting analyses for design completion. The objective of this report is to provide a high-level summary of the design thus far and provide references including, but not limited to, the following design deliverables: • Complete final drawings, specifications and commercial grade dedications that may be released for bid and/or construction. • Clearly defined testing plans for the safety and functionality of all subsystems. • Quality Assurance Program for Design, Testing and Procurement. • Software Quality Assurance Plan. • Code of Record (COR), applicable design requirements including codes and standards. • Final design that meets all the requirements stipulated in the COR. • Final design review, consisting of final validation of comment resolution from previous reviews, and a review of any additional developments since the last review. • Updated Safety Design Strategy. • Hazard Analysis. • Fire Hazard Analysis. • Accident analysis. • Security vulnerability assessment. • Current and detailed cost estimate. • Current construction schedule, and • Risk & Opportunities Assessment.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

NASIS data base management system - IBM 360/370 OS MVT implementation. 1: Installation standards

The installation standards for the NASA Aerospace Safety Information System (NASIS) data base management system are presented. The standard approach to preparing systems documentation and the program design and coding rules and conventions are outlined. Included are instructions for preparing all major specifications and suggestions for improving the quality and efficiency of the programming task.

Source record↗

Global Precipitation Measurement (GPM) Safety Inhibit Timeline Tool

The Global Precipitation Measurement (GPM) Observatory is a joint mission under the partnership by National Aeronautics and Space Administration (NASA) and the Japan Aerospace Exploration Agency (JAXA), Japan. The NASA Goddard Space Flight Center (GSFC) has the lead management responsibility for NASA on GPM. The GPM program will measure precipitation on a global basis with sufficient quality, Earth coverage, and sampling to improve prediction of the Earth's climate, weather, and specific components of the global water cycle. As part of the development process, NASA built the spacecraft (built in-house at GSFC) and provided one instrument (GPM Microwave Imager (GMI) developed by Ball Aerospace) JAXA provided the launch vehicle (H2-A by MHI) and provided one instrument (Dual-Frequency Precipitation Radar (DPR) developed by NTSpace). Each instrument developer provided a safety assessment which was incorporated into the NASA GPM Safety Hazard Assessment. Inhibit design was reviewed for hazardous subsystems which included the High Gain Antenna System (HGAS) deployment, solar array deployment, transmitter turn on, propulsion system release, GMI deployment, and DPR radar turn on. The safety inhibits for these listed hazards are controlled by software. GPM developed a "pathfinder" approach for reviewing software that controls the electrical inhibits. This is one of the first GSFC in-house programs that extensively used software controls. The GPM safety team developed a methodology to document software safety as part of the standard hazard report. As part of this process a new tool "safety inhibit time line" was created for management of inhibits and their controls during spacecraft buildup and testing during 1& Tat GSFC and at the Range in Japan. In addition to understanding inhibits and controls during 1& T the tool allows the safety analyst to better communicate with others the changes in inhibit states with each phase of hardware and software testing. The tool was very useful for communicating compliance with safety requirements especially when working with a foreign partner.

Dion, Shirley↗

Electrochemically recovered struvite matches conventional fertilizers in soil nutrient supply

Phosphorus (P) is an essential macronutrient for agriculture, yet global reliance on finite phosphorite reserves raises concerns about long-term food and nutrient security. Struvite (MgNH 4 PO 4 ·6H 2 O), a mineral recovered from municipal wastewater, represents a sustainable and circular source of P, but uncertainty remains regarding its nutrient availability relative to conventional fertilizers. This study evaluated the fertilizer value and environmental safety of electrochemically recovered struvite (RecoP) in comparison with diammonium phosphate (DAP), triple superphosphate (TSP), and rock phosphate (RockP). Nutrient availability, potential contaminant concentrations, and soil P and nitrogen (N) dynamics were assessed using standardized chemical analyses and an 8-week incubation experiment across three soils with contrasting soil types. RecoP contained 14.7% citrate-soluble P, significantly greater than RockP and comparable to DAP and TSP. Across all soils, RecoP increased both readily available and moderately labile P pools (p < 0.01), matching the performance of conventional fast-release fertilizers. Despite containing approximately half the total of DAP, RecoP stimulated nitrification rates that were 2.2 times greater than the control and exceeded those of TSP, suggesting that fertilizer-derived N bioavailability, rather than total N loading, governed microbial N transformation responses. Concentrations of potentially toxic elements in RecoP were consistently well below US Environmental Protection Agency regulatory limits thresholds. Collectively, these results indicate that RecoP functions as a readily available source of both P and N, comparable to widely used conventional fertilizers, while meeting environmental safety standards. RecoP therefore represents a viable component of sustainable nutrient management strategies that support P recycling and agricultural productivity.

Kharal, Sudarshan [Ohio Univ., Athens, OH (United ↗

Flammable Gas Generation and Control at the Idaho Completion Project Legacy Combustible Gas Generation - 20191

On April 11, 2018, four drums containing transuranic waste at the Idaho National Laboratory underwent over-pressurization, ejecting their lids and spreading radiological waste within a facility. An investigation has found that waste in the drums generated methane gas, which contributed to the event. Subsequent to the investigation, the potential for drums to have methane and other flammable analytes whose concentrations could approach or exceed the lower flammability limit (LFL) and the adequacy of the controls to prevent or mitigate a possible deflagration was evaluated. An extensive review of the historical records was performed to determine how many drums exceed the LFL. The historical record identified a small quantity of drums that exceeded the LFL for xylene, hydrogen, and methane. The primary codified applicable code or standard for handling drums is 29 CFR 1910.120 (j) 'Handling Drums and Containers.' It is used throughout the commercial and government sector. This code is integrated throughout the Fluor Idaho safety management programs and procedures to control the Standard Industrial Hazards (SIHs) associated with drum and container handling. Example requirements include: - Drums and containers are inspected, and their integrity assured prior to being moved. - Site operations are organized to minimize the amount of drum or container movement. - When there is a reasonable possibility of flammable atmospheres being present, material handling equipment and hand tools are of the type to prevent sources of ignition. Drums and containers under pressure, as evidenced by bulging or swelling, are not moved until the cause for excess pressure is determined and appropriate containment procedures have been implemented to protect employees from explosive relief of the drum. Drums which exceed the WIPP FGA limit have NCRs associated with them. Once a drum fails flammable gas sampling, an NCR is initiated. The NCR drives placement into NCR dense pack rows. A standing order drives placement of the FGA failures to a single planer segregation location. These drums are not allowed for further processing or shipment until the NCR has been cleared. Once in the single planer rows, follow-up FGA testing is performed by CCP. The NCR is dispositioned by follow-up sampling occurring after adequate time has been provided for the gas to diffuse through the filter assembly, or, in some cases, the drums are repackaged into additional drums to reduce the source term. To date, the ICP project has performed approximately 1.5 million drums moves without a deflagration event due to combustible gas generation. Flammable gas generation in a transuranic waste drum is not unique to the ICP but is common across the DOE complex. Based on the experience at Idaho, application of industry standards is sufficient to control the risk of drum deflagration due to drum movements. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

GPM Timeline Inhibits For IT Processing

The Safety Inhibit Timeline Tool was created as one approach to capturing and understanding inhibits and controls from IT through launch. Global Precipitation Measurement (GPM) Mission, which launched from Japan in March 2014, was a joint mission under a partnership between the National Aeronautics and Space Administration (NASA) and the Japan Aerospace Exploration Agency (JAXA). GPM was one of the first NASA Goddard in-house programs that extensively used software controls. Using this tool during the GPM buildup allowed a thorough review of inhibit and safety critical software design for hazardous subsystems such as the high gain antenna boom, solar array, and instrument deployments, transmitter turn-on, propulsion system release, and instrument radar turn-on. The GPM safety team developed a methodology to document software safety as part of the standard hazard report. As a result of this process, a new tool safety inhibit timeline was created for management of inhibits and their controls during spacecraft buildup and testing during IT at GSFC and at the launch range in Japan. The Safety Inhibit Timeline Tool was a pathfinder approach for reviewing software that controls the electrical inhibits. The Safety Inhibit Timeline Tool strengthens the Safety Analysts understanding of the removal of inhibits during the IT process with safety critical software. With this tool, the Safety Analyst can confirm proper safe configuration of a spacecraft during each IT test, track inhibit and software configuration changes, and assess software criticality. In addition to understanding inhibits and controls during IT, the tool allows the Safety Analyst to better communicate to engineers and management the changes in inhibit states with each phase of hardware and software testing and the impact of safety risks. Lessons learned from participating in the GPM campaign at NASA and JAXA will be discussed during this session.

Inhibits↗

Model Based Mission Assurance: NASA's Assurance Future

Model Based Systems Engineering (MBSE) is seeing increased application in planning and design of NASA’s missions. This suggests the question: what will be the corresponding practice of Model Based Mission Assurance (MBMA)? Contemporaneously, NASA’s Office of Safety and Mission Assurance (OSMA) is evaluating a new objectives based approach to standards to ensure that the Safety and Mission Assurance disciplines and programs are addressing the challenges of NASA’s changing missions, acquisition and engineering practices, and technology. MBSE is a prominent example of a changing engineering practice. We use NASA’s objectives-based strategy for Reliability and Maintainability as a means to examine how MBSE will affect assurance. We surveyed MBSE literature to look specifically for these affects, and find a variety of them discussed (some are anticipated, some are reported from applications to date). Predominantly these apply to the early stages of design, although there are also extrapolations of how MBSE practices will have benefits for testing phases. As the effort to develop MBMA continues, it will need to clearly and unambiguously establish the roles of uncertainty and risk in the system model. This will enable a variety of uncertainty-based analyses to be performed much more rapidly than ever before and has the promise to increase the integration of CRM (Continuous Risk Management) and PRA (Probabilistic Risk Analyses) even more fully into the project development life cycle. Various views and viewpoints will be required for assurance disciplines, and an over-arching viewpoint will then be able to more completely characterize the state of the project/program as well as (possibly) enabling the safety case approach for overall risk awareness and communication.

Evans, John↗