Search NASA⌕ Search

SEARCH · Search NASA

Results for “program managers”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

2018 LDRD Annual Report (Argonne National Laboratory)

Argonne National Laboratory’s Laboratory Directed Research and Development (LDRD) program encourages the development of novel technical concepts, enhances the Laboratory’s research and development (R&D) capabilities, and enables pursuit of strategic laboratory goals. Argonne’s LDRD projects are proposal based and peer reviewed, supporting ideas that require advanced exploration so they can be sufficiently developed to pursue support through normal programmatic channels. Among the aims of the projects supported by the LDRD program are the establishment of engineering proofs of principle, assessment of design feasibility for prospective facilities, development of instrumentation or computational methods or systems, and discoveries in fundamental science and exploratory development. All LDRD projects have demonstrable ties to one or more of the science, energy, environment, and national security missions of the U.S. Department of Energy (DOE) and its National Nuclear Security Administration (NNSA), and many are also relevant to the missions of other federal agencies that sponsor work at Argonne. A natural consequence of the more “applied” type projects is their concurrent relevance to industry. The LDRD program is managed in overarching portfolios, each containing multiple projects each fiscal year. The LDRD Prime portfolio is further divided into strategic focus areas aligned with Argonne’s strategic plan. The largest component of Argonne’s program is LDRD Prime, which emphasizes R&D explicitly aligned with Laboratory major initiatives in support of Argonne’s strategic plan. The choice of Focus Areas under the LDRD Prime component reflects the major initiatives; the state of development of relevant technical fields; the potential value of advancing those fields to DOE/NNSA and the nation; and the compatibility of the fields with existing facilities, capabilities, and staff expertise at Argonne. Focus Areas with projects that ended in FY18 are: Advanced Computing, Biological and Environmental Science Capability Development, Energy Manufacturing Science and Engineering, Hard X-ray Sciences, Materials and Chemistry, Securing Energy and Critical Resources, and The Universe as Our Laboratory (ULab).

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

Panel Session 23: Start-up of Three Major DOE Treatment Facilities - SWPF, IWTU and DFLAW

This panel focused on the DOE-EM planning to complete construction and start up three major treatment facilities in the next 18 months. This included the Salt Waste Processing Facility (SWPF) at Savannah River, the Integrated Waste treatment Unit (IWTU) at Idaho and the Direct Feed Low-Activity Waste (DFLAW) at Hanford. DOE Site Managers from SC, ID and WA introduced each facility then the DOE Contractor provided the details on their biggest challenges in regulatory issues, construction, start-up and operations of each facility. Panelists with presentations: Lessons in Managing Risks in First of a Kind Nuclear Construction and Start-Up (Pamela Marks); Integrated Waste Treatment Unit (Connie Flohr); IWTI-Fluor (Frederick Hughes); Startup and Commissioning (Tom Fletcher)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

Automated Data Review of Analytical Laboratory Results at Los Alamos National Laboratory - 20299

Newport News Nuclear BWXT-Los Alamos, LLC (N3B) collects samples in support of the U.S. Department of Energy's (DOE) Office of Environmental Management (EM) Los Alamos Legacy Cleanup Contract (LLCC). N3B receives and reviews over 1.6 million sample data points annually in support of various ongoing environmental monitoring and remediation projects of the LLCC. N3B must demonstrate and document that reported external analytical laboratory data produced for the LLCC are of sufficient quality to fulfill their intended purpose and to support defensible decision making as described in EPA QA/G4 Guidance for the Data Quality Objectives Process 1994. In 2018, N3B assumed management of the LLCC along with the Environmental Information Management (EIM) database that contains all historical and current environmental data associated with the LLCC. The entire EIM database is shared between N3B, Triad National Security, LLC (Triad), and New Mexico Environment Department (NMED). These three parties jointly manage the database, its configuration, and changes / updates. All environmental data that are entered into EIM are updated and available, on a daily basis, in the linked public database Intellus New Mexico (Intellus). The quality and defensibility of the environmental data generated from sampling activities is a key component of an effective remediation process. Providing quality data is accomplished through a data assessment process that includes examination, verification, and validation. Examination is the assessment of completeness of the deliverables, identification of any reporting errors, and determining the usability of the data based on the laboratory's evaluation of its data as described in the case narrative received with the data. Verification consists of an evaluation of the Electronic Data Deliverables (EDD) data report to determine the extent to which the external analytical laboratories met method and contract-specific quality control and reporting requirements. Validation consists of determining the data quality and the extent to which the external analytical laboratories accurately and completely reported all sample and quality control results and satisfied all contract requirements. EIM contains an automatic Data Validation Module which performs automated data review (DVM ADR). DVM ADR is a tool to assist in the validation process. When DVM ADR is used in conjunction with manual examination of sample data packages, the combination of the two will meet and exceed the requirements of verification. N3B recognized an opportunity for process improvement, focusing on DVM ADR configuration and enhancements in EIM. Testing EIM's configuration provided proof of the DVM ADR's capabilities and flexibility to accurately perform routine data checks based on analytical methods and regulatory requirements. In addition, the DVM ADR module was improved through enhancements for all analytes, particularly upgrades for radiochemistry data. Extensive testing of the DVM ADR module occurred using EDDs from actual laboratory analyses on the EIM testing site. During this process, N3B manipulated EDD information to verify that the actual outcomes matched the expected outcomes. The results of this testing were shared with the database architects, and configuration improvements were identified to address these results. During this process, N3B identified that the radiochemical DVM ADR capabilities were underutilized, and so enhanced the DVM ADR functionality with respect to radioanalytical assessment. N3B environmental data uploads to Intellus on a daily basis from EIM, once the analytical data undergoes examination and verification. As such, it is important to have a high level of confidence in the quality and defensibility of the data. The process of manual examination, along with the DVM ADR, in conjunction with full validation of a percentage the data specified through the Data Quality Objectives greatly increases efficiency of data review and confidence level of the quality of the data, and gives the project managers, governmental offices, and the public expedited access to high-quality data. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

USACE FUSRAP Records Management Challenges in the Digital Age - 20242

In late 2016, the U.S. Army Corps of Engineers (USACE) implemented a Headquarters-supported nationwide records management initiative managed by the USACE-New England District to address the digitization and organization of Formerly Utilized Sites Remedial Action Program (FUSRAP) project files. This initiative will prepare USACE FUSRAP for moving toward a fully electronic system of records management. Additionally, the records management initiative streamlines the process and prepares the Administrative Record (AR) and Permanent Record (PR) file for transfer from USACE to the U.S. Department of Energy (DOE)-Office of Legacy Management (LM) following project closeout. Over the past couple of years, USACE and DOE-LM have been working to finalize a joint guidance document to assist in the FUSRAP records transition process. However, there remain key records management topics that require further discussion and development. Specifically, these topics include the implementation, process, and procedure for the capture of social media records and compliance with Section 508 of the Rehabilitation Act of 1973 (29 USC 794d), as amended. Due to advances in technology and the ease of communication it provides, USACE is using social media more often to interface with the public than 5, 10 or 15 years ago. The identification and capture of these records are challenging because it requires each USACE district or producer of a record to track what has been released through social media so that it can be captured as part of the AR or PR. USACE is currently evaluating processes and procedures for social media records capture. This paper explores how social media is being used by USACE across FUSRAP projects and best practices for the capture of social media records. Public accessibility to the project AR is required under the Comprehensive Environmental Response, Compensation, and Liability Act, which USACE FUSRAP must follow. As USACE FUSRAP ARs are converted to a digital format, greater accessibility to the files can be provided through web sites or other electronic media. However, Section 508 of the Rehabilitation Act must be considered when releasing electronic files to the public. Under Section 508, government agencies must ensure that information is made available to the public in a format that provides equal access to persons with disabilities. This paper discusses the electronic records requirements under Section 508 and addresses broad implementation of compliance across large digital records sets. Records management challenges are presented in the context of the FUSRAP records management program; however, these records management considerations and best practices are applicable across all Federal agency records management programs. Examples presented will further aid in understanding electronic records requirements that may be included on new USACE FUSRAP contracts as well as upcoming National Archives Records Administration requirements that will move us toward an electronic government. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

Panel Session 26: Risk-Based Approaches to Environmental Remediation and Adaptive Site Management

This panel discussed the needs and importance of developing risk-based approaches to environmental remediation that will enable complex sites to be adaptively managed by applying cost-effective remedies that are protective of human health and the environment. The discussion emphasized risk-based approaches within decision processes and subsequent incorporation into regulatory decision documents. Remedy approaches, remediation exit strategies, and long-term monitoring plans that support risk-based end-states for difficult-to-remediate sites were discussed Panelists with presentations: Risk-Informed Approaches to Environmental Remediation and Adaptive Site Management (Vicky Freedman); ITRC Adaptive Site Management Perspective (Michael Truex); Optimization During Operations and Maintenance Phase at the Hanford Site 200-ZP-1 Groundwater Operable Unit (Emerald Laija, Kate Amrhein, Michael Truex); Adaptive Management: EPA Overview (Benjamin Simes); Decommissioning and Environmental Remediation Section Division of Nuclear Fuel Cycle and Waste Technology (Horst Monken Fernandes)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

Cigeo Design Options, Risks and Opportunities Management: A Continuous Project Management Goal - 20015

Andra is currently completing the detailed engineering phase of the stepwise design development of Cigeo, the French HLW and IL-LLW Deep Geological Repository. If licensed in the coming years, Cigeo's progressive construction, industrial operation and closure will last over more than a century. Such a duration, associated with the requirements in terms of reversibility, lead to the choice of an incremental design that allows, for next operator generations, to integrate improvements derived from scientific and technical progress as well as from experience feedback from its operation. This incremental design approach, associated with a permanent risks and opportunities management process, will continue after licensing of Cigeo as a tool for the governance of the reversibility. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

Latest Developments in PM Systems and Methods and their Application to WM Projects - 20364

How do you improve on an industry that is well established yet often misses the mark on key metrics demonstrating effective planning and execution of project scope, schedule and budget? With the increased complexity of DOE projects relative to either poorly kept records of what wastes are stored or the lack of specific knowledge relative to the waste concentrations/quantities, this is a question continually asked and investigated by many. In fact, in 2017, the GAO's report to Congress indicated that although the DOE has made some progress on its monitoring effectiveness and demonstrating progress criteria, these goals were not met and there needs to be more improvement and monitoring. This paper will offer some insights into the latest developments in project management methodologies and the possible application of these to waste management projects. Traditional data generated via a project schedule that utilizes critical path methodology (CPM) and additional earned value management (EVM) data needs to be accurate and enable the project manager to better understand the probability of project success. Although this data has readily been available on most large-scale projects, success as measured by various stakeholder groups including the client, project team, regulators, etc. is less than optimal. Therefore, an urgent need exists to explore how traditional project data (CPM and EVM) coupled with new methodologies allows for better planning and execution by the project team. Many new approaches/methodologies can even be used to predict the success of options prior to full implementation on the actual project. Three approaches/methodologies will be discussed: - Artificial Intelligence; - Change Management; - Blend of Traditional Management (Gantt chart) and Agile Methodologies. As market forces change, so will the direction of project management. The days of 'one size fits all' are no longer valid. A combination of predictive and adaptive approaches in the management of projects is essential to enable execution of project deliverables on time, under budget, and within the contractual scope. This paper is intended to provide the reader with insight to the close relationship of project management trends and business management trends, and to provoke critical thinking about what it means to align project management strategy with an environment of non-stop innovation. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

Reliability and Integrity Management Scoping Study

The U.S. Nuclear Regulatory Commission (NRC) is developing the regulatory framework and technical expertise to support regulatory review of advanced non-light water reactor (ANLWR) designs. The NRC staff expects most of these designs to use the American Society of Mechanical Engineers (ASME) Boiler and Pressure Vessel Code (BPVC) Section XI, Division 2 “Requirements for Reliability and Integrity Management (RIM) Programs for Nuclear Power Plants” for developing and implementing pre-service inspection (PSI) and in-service inspection (ISI) programs. The NRC recently endorsed ASME BPVC Section XI, Division 2 (BPV XI-2) in Regulatory Guide (RG) 1.246. This new ASME code is yet to be used in any applications submitted for NRC review. This report provides an overview of the current state of knowledge and practices within the industry for the use of BPV XI-2 for the development and implementation of a PSI and ISI program for non-light water reactors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

Nevada National Security Site Environmental Report 2019

This report presents the National Nuclear Security Administration Nevada Field Office environmental protection and monitoring programs data and the compliance status for calendar year 2019 at the Nevada National Security Site and at its two support facilities, the North Las Vegas Facility and the Remote Sensing Laboratory-Nellis. This report also addresses environmental restoration projects conducted by the Environmental Management Nevada Program Office at the Tonopah Test Range.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

Systematic Analysis of Drivers and Barriers of Cross-Sectorial Learning Between Nuclear and Oil and Gas Decommissioning Projects - 20139

Project and megaproject management in the energy sector have historically focused on the planning and delivery of the construction of infrastructure. Therefore, policies are predominantly oriented to support the construction of infrastructure rather than its decommissioning. However, globally, several facilities have reached (or will soon reach) their end-of-life and need to be decommissioned. These facilities span across the energy sector, including nuclear power plants and oil and gas rigs, whose decommissioning present unprecedented techno-socio-economic challenges. Moreover, globally, their decommissioning cost is estimated to reach hundreds of billions of US dollars and this budget keeps increasing, with limited knowledge-transfer across industries to mitigate the spiraling increase of this figure. Cross-sectorial knowledge-transfer is a way to tackle this matter and improve the planning and delivery of decommissioning and waste management projects. The aim of this research is to build a road-map based on cross-sectorial industrial experience, designed to promote the sharing of good practices between projects both within and across industries dealing with major decommissioning and waste management challenges. To reach this aim, the tacit knowledge of senior practitioners on several large scale nuclear and oil and gas decommissioning projects is made explicit by the means of semi-structured interviews, systematically analyzed through directed content analysis. The results of this analysis include a list of good practices that could and should be transferred to nuclear decommissioning projects, including the need to promote the adoption of incentives explicitly linked to the project deliverables, and to develop long-term plans to support smooth transition from operations to decommissioning. Suggestions about how the knowledge-transfer can be promoted within and across organizations are also discussed. In this way, this research provides practical guidance for project managers and policymakers on how to support the planning and delivery of projects with improved performance. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

CSA, the French LILW Disposal Facility: Taking Stock of the 30 years' Operating Experience - 20009

French Andra's currently operational LILW repository, Aube disposal facility, is almost 30 years old. From the beginning, the repository has benefited from the lessons learned from the first disposal facility, the CSM. It has nevertheless continued to evolve, to improve and to adapt, seeking to gain in efficiency, safety and cost optimization. This is a look at what has changed at the CSA since 1992 - and the effect these changes had on its operating practices, construction principles and the entire management organization. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2025

The transition from resistance to acceptance: Managing a marine invasive species in a changing world

Abstract Marine invasive species can transform coastal ecosystems, yet mitigating their effects can be difficult, and even impractical. Often, marine invasive species are managed at poorly matched spatial scales, and at the same time, rates of spread and establishment are increasing under climate change and can outpace resources available for population suppression. These circumstances challenge traditional conservation goals of maintaining a historic environmental state, especially for a species like the European green crab ( Carcinus maenas ), a formidable invader with few examples of successful long‐term removal programs. A management paradigm where decision alternatives include resisting or accepting a new ecological trajectory may be needed. We apply mathematical concepts from decision theory to develop a quantitative framework for navigating management decisions in this new resist‐accept paradigm. We develop a model of European green crab growth, removal and colonization, and we find optimal levels of removal effort that minimize both ecological change and removal cost. We establish a benchmark of colonization pressure at which green crab density becomes decoupled from a decision maker's actions, such that population control can no longer shape the invasion trajectory. For informing the decision boundary between resistance and acceptance, our results highlight that a decision maker's understanding of how removal cost scales with removal effort is more important than understanding the density‐impact relationship. We show that assuming stationary system dynamics can result in sub‐optimal levels of species removal effort, highlighting the importance of developing anticipatory management strategies by accounting for non‐stationary dynamics. Policy implications . For marine invasive species that can disperse across long distances and recolonize rapidly after removal, the focus of conservation policy should shift away from understanding how to resist change to understanding when to stop resisting change. Navigating this decision problem involves trade‐offs among competing objectives, highlighting the need for structured approaches to elicit objective weights that reflect the values of the decision maker. For natural resource managers facing possible ecosystem transformation, this decision framework can enable proactive and strategic decisions made under uncertainty in a changing world.

Keller, Abigail G. [Department of Environment Scie↗
DOE OSTI2023

FRMAC Assessment Manual Volume 1 - Assessment Division Operations

In the event of a major radiological incident or accident, the Federal Radiological Monitoring and Assessment Center (FRMAC) will coordinate the federal agencies that have various statutory responsibilities and/or capabilities for responding to such incidents (Ref. FRMAC10). The FRMAC is responsible for coordinating all environmental radiological monitoring, sampling, and assessment activities for the response. For less severe radiological incidents, elements of the Department of Energy (DOE) Consequence Management (CM) program, such as the CM Response Team (CMRT) or CM Home Team (CMHT) may be activated to provide similar support activities to regional or local response assets. This manual describes the roles and responsibilities of the Assessment Division of the FRMAC during a response to a radiological incident. Every effort will be made in this manual in accordance with the Implementation of the National Incident Management System (NIMS)/Incident Command System (ICS) in the Federal Radiological Monitoring and Assessment Center (FRMAC) – Emergency Phase (Ref. RSL07) to use terminology consistent with the National Incident Management System (NIMS) for Incident Command System (ICS) organizations, planning processes, and leadership positions (Ref. FEMA17). This manual also applies to smaller scale CM responses that may involve the CMRT or CMHT elements without the formation of a FRMAC. It details the concept of operations for the Assessment Division, including common tasks performed by the Division. This manual also describes the organizational structure of the Assessment Division and roles of the personnel within the Division.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2021

Preliminary Procedures and Acceptance Criteria for in-situ Structural Materials Surveillance for MSR

This report describes the initial development of the technical basis for a materials surveillance technology that, when fully developed and validated, can be used by stakeholders to develop and implement a materials surveillance program to manage materials degradation during reactor operations. The procedures described in this report aim to bound the detrimental effects of the reactor environment on the creep-fatigue life of the reactor components through materials surveillance. Specifically, the report describes procedures for selecting critical locations within the reactor components for surrogate materials surveillance and the sizing and placements of passively-actuated materials surveillance test articles under development by the US Department of Energy, Advanced Reactor Technologies Program. These test articles apply cyclic thermomechanical load to a surrogate sample of the component structural material passively through thermal expansion mismatch within the articles, without requiring any penetrations in the reactor coolant boundary. The procedures can be used to size materials surveillance test articles so that they will fail before the corresponding structural component. These articles would be exposed to the component operating environment, located to experience a bounding radiation fluence and representative coolant exposure. They can be monitored during reactor operations to ensure that they have not failed under the combination of creep-fatigue damage and environmental degradation. The report describes the key technical decisions and the corresponding rational for using these procedures to provide advanced warning of any impending material failure. An appendix describes the technical basis and the procedure for sizing a family of passively-actuated test articles. Finally, the report describes future work needed to complete the technical basis underlying this materials surveillance technology.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

Federal Workplace Charging Program Guide

This report serves as a program guide to support federal agencies in developing their own policy documents for workplace charging. It provides suggested language that agencies can incorporate into their own policies to define requirements for charging privately owned vehicles (POVs) on government-owned or leased property. The Fixing America's Surface Transportation Act authorizes the U.S. General Services Administration (GSA) and other federal agencies to install, operate, and maintain electric vehicle supply equipment (EVSE) for POVs in parking areas used by federal employees and authorized users, and it requires the collection of fees to recover the costs of installing, operating, and maintaining this equipment. This guide offers details for agency facility managers, transportation personnel, employees, and vendors regarding the charging of electric vehicles (EVs) for use by employees and personnel at government-owned and leased buildings. This guide describes the requirements associated with federal agencies providing EV charging in publicly accessible sites. The policy also describes when and how fees may be imposed to cover costs of electricity, as well as EVSE units and installations in various scenarios.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2022

Feedstock Carbon Intensity Calculator (FD-CIC): Users’ Manual and Technical Documentation

The carbon intensities (CIs) of biofuels are determined with the life cycle analysis (LCA) technique, which accounts for the energy/material uses and emissions during the complete supply chain of biofuel including feedstock production and fuel conversion stages. Regulatory agencies such as California Air Resources Board (CARB) adopts LCA to calculate biofuel CIs. The Low Carbon Fuel Standard (LCFS) program developed by CARB allows individual biofuel conversion facilities to submit their own biofuel CIs with their facility input data and incentivizes the reduction in the CI specific to that particular facility compared to a reference fuel’s CI (Liu et al 2020). Such an incentive program has driven innovations in biorefineries to reduce their greenhouse gas (GHG) emissions by linking their revenue directly to its CI score through LCFS credit trading. Besides the biofuel conversion stage, different farming practices for feedstock growth can result in significant CI variations for feedstocks, thus for biofuels. To provide evidence-based research findings, the U.S. Department of Energy’s Advanced Research Projects Agency–Energy (ARPA-E) has supported the Systems Assessment Center of the Energy Systems and Infrastructure Analysis Division at Argonne National Laboratory to examine CI variations of different farming practices to grow agricultural crops for biofuel production. Meanwhile, the ARPA-E has launched the Systems for Monitoring and Analytics for Renewable Transportation Fuels from Agricultural Resources and Management (SMARTFARM) program to develop technologies and data platforms that enable an accurate measurement of key farming parameters that can help robust accounting of the GHG benefits of sustainable, low-carbon agronomic practices at farm level.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Overview of System Integration Analysis Activities for Integrated Waste Management

Spent nuclear fuel (SNF) generated by the current fleet of commercial nuclear reactors is being stored at reactor sites in spent fuel pools (SFPs) and in dry independent spent fuel storage installations (ISFSIs). The U.S. Department of Energy Office of Nuclear Energy (DOE-NE) Integrated Waste Management (IWM) program is examining a suite of IWM system options and conducting supporting analyses to enable future informed choices. The IWM program is currently organized into the following four major areas: (1) IWM facilities and equipment concepts and development, (2) transportation capability analysis and support, (3) information technology solutions and support, and (4) system integration analysis and support. This paper focuses on the activities ongoing in the IWM system integration analysis and support area. Two main research activities in this area are: data and tools development, validation, and maintenance; and special studies, analyses, and assessments.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2023

Precursor Analysis Report: Ryuk Ransomware Attack on Universal Health Services 2020

The Ryuk Ransomware Attack on Universal Health Services (UHS) 2020 Precursor Analysis Report leverages publicly available information about the 2020 UHS cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. UHS manages over 400 hospitals and is one of the largest healthcare providers in the United States with 3.5 million patients each year. On 27 September 2020, UHS suffered a widespread ransomware attack that resulted in a denial of service to critical internet-dependent healthcare systems including workstations, phones, and data centers. Employees resorted to filing patient details with pen and paper, while other facilities had to redirect ambulances and urgent patients to other facilities for adequate care. Adversaries carried out the attack with Ryuk, a ransomware that encrypts data and generates a RyukReadMe.txt ransom note with the ransom fee to decrypt the data, varying from 15 Bitcoin (BTC) to 50 BTC, equivalent to roughly $\$$353,892 to $\$$964,617. UHS did not pay the ransom and was able to recover data through backups, but still reported an impact of $\$$67 million dollars in recovery costs. On 29 October, one month after the attack, UHS made an official statement that their systems had been restored and they were resuming normal operations. Researchers and analysts identified 18 unique techniques (used in a sequence of 19 steps) utilized during the attack with a total of 185 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fourteen of the identified techniques used during the UHS cyber attack were precursors to the triggering event. Analysis identified 106 observables associated with these precursor techniques, 82 of which were assessed to have an increased likelihood of being perceived in the 30 days to two hours preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗