Human System Risk Communication: The Risk Story, Likelihood and Consequence, and Evidence
Explore the source record for details and available documents.
Erik Antonsen↗
SEARCH · Search NASA
Results for “Risk consequence”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Assessment and Validation of Collision "Consequence" Method of Assessing Orbital Regime Risk Posed by Potential Satellite Conjunctions
Collision risk management theory requires a thorough assessment of both the likelihood and consequence of potential collision events. Satellite conjunction risk assessment has produced a highly-developed theory for assessing the likelihood of collision but neglects to account for the consequences of a given collision. While any collision may compromise the operational survival of a spacecraft, the amount of debris produced by the potential collision, and therefore the degree to which the orbital corridor may be compromised, can vary greatly among satellite conjunctions. Previous studies leveraged work on satellite collision modeling to develop a method to estimate whether a particular collision is likely to produce a relatively large or relatively small amount of resultant debris. The approximation of the number of debris pieces is dependent on a mass estimation process for the secondary objects utilizing the radar cross section of said object. This study examines the validity of the mass estimation process and establishes uncertainty bounds on the secondary object mass, which will be used to best approximate the possible consequences of a potential collision. This process is then applied to a large set of historical conjunctions to assess the frequency at which possible collisions may significantly augment the orbital debris environment in operational spacecraft.
Collision Consequence↗
Control of Risks Through the Use of Procedures: A Method for Evaluating the Change in Risk
This paper considers how procedures can be used to control risks faced by an organization and proposes a means of recognizing if a particular procedure reduces risk or contributes to the organization's exposure. The proposed method was developed out of the review of work documents and the governing procedures performed in the wake of the Columbia accident by NASA and the Space Shuttle prime contractor, United Space Alliance, LLC. A technique was needed to understand the rules, or procedural controls, in place at the time in the context of how important the role of each rule was. The proposed method assesses procedural risks, the residual risk associated with a hazard after a procedure's influence is accounted for, by considering each clause of a procedure as a unique procedural control that may be beneficial or harmful. For procedural risks with consequences severe enough to threaten the survival of the organization, the method measures the characteristics of each risk on a scale that is an alternative to the traditional consequence/likelihood couple. The dual benefits of the substitute scales are that they eliminate both the need to quantify a relationship between different consequence types and the need for the extensive history a probabilistic risk assessment would require. Control Value is used as an analog for the consequence, where the value of a rule is based on how well the control reduces the severity of the consequence when operating successfully. This value is composed of two parts: the inevitability of the consequence in the absence of the control, and the opportunity to intervene before the consequence is realized. High value controls will be ones where there is minimal need for intervention but maximum opportunity to actively prevent the outcome. Failure Likelihood is used as the substitute for the conventional likelihood of the outcome. For procedural controls, a failure is considered to be any non-malicious violation of the rule, whether intended or not. The model used for describing the Failure Likelihood considers how well a task was established by evaluating that task on five components. The components selected to define a well established task are: that it be defined, assigned to someone capable, that they be trained appropriately, that the actions be organized to enable proper completion and that some form of independent monitoring be performed. Validation of the method was based on the information provided by a group of experts in Space Shuttle ground processing when they were presented with 5 scenarios that identified a clause from a procedure. For each scenario, they recorded their perception of how important the associated rule was and how likely it was to fail. They then rated the components of Control Value and Failure Likelihood for all the scenarios. The order in which each reviewer ranked the scenarios Control Value and Failure Likelihood was compared to the order in which they ranked the scenarios for each of the associated components; inevitability and opportunity for Control Value and definition, assignment, training, organization and monitoring for Failure Likelihood. This order comparison showed how the components contributed to a relative relationship to the substitute risk element. With the relationship established for Space Shuttle ground processing, this method can be used to gauge if the introduction or removal of a particular rule will increase or decrease the .risk associated with the hazard it is intended to control.
Praino, Gregory T.↗
Pitfalls and Precautions When Using Predicted Failure Data for Quantitative Analysis of Safety Risk for Human Rated Launch Vehicles
Launch vehicle reliability analysis is largely dependent upon using predicted failure rates from data sources such as MIL-HDBK-217F. Reliability prediction methodologies based on component data do not take into account system integration risks such as those attributable to manufacturing and assembly. These sources often dominate component level risk. While consequence of failure is often understood, using predicted values in a risk model to estimate the probability of occurrence may underestimate the actual risk. Managers and decision makers use the probability of occurrence to influence the determination whether to accept the risk or require a design modification. The actual risk threshold for acceptance may not be fully understood due to the absence of system level test data or operational data. This paper will establish a method and approach to identify the pitfalls and precautions of accepting risk based solely upon predicted failure data. This approach will provide a set of guidelines that may be useful to arrive at a more realistic quantification of risk prior to acceptance by a program.
Hatfield, Glen S.↗
Consideration of Collision "Consequence" in Satellite Conjunction Assessment and Risk Analysis
Classic risk management theory requires the assessment of both likelihood and consequence of deleterious events. Satellite conjunction risk assessment has produced a highly-developed theory for assessing collision likelihood but holds a completely static solution for collision consequence, treating all potential collisions as essentially equally worrisome. This may be true for the survival of the protected asset, but the amount of debris produced by the potential collision, and therefore the degree to which the orbital corridor may be compromised, can vary greatly among satellite conjunctions. This study leverages present work on satellite collision modeling to develop a method by which it can be estimated, to a particular confidence level, whether a particular collision is likely to produce a relatively large or relatively small amount of resultant debris and how this datum might alter conjunction remediation decisions. The more general question of orbital corridor protection is also addressed, and a preliminary framework presented by which both collision likelihood and consequence can be jointly considered in the risk assessment process.
Hejduk, M.↗
Quantitative Assessment of Risk for Modeling Radiation Impact on System Functions
Functional models are used to identify possible faults and system-level fault consequences. A risk factor is calculated to evaluate mitigation. The risk factor from different radiation-induced faults is compared with system telemetry from on-orbit data.
probabilistic risk assessment↗
Non-airborne conflicts: The causes and effects of runway transgressions
The 1210 ASRS runway transgression reports are studied and expanded to yield descriptive statistics. Additionally, a one of three subset was studied in detail for purposes of evaluating the causes, risks, and consequences behind trangression events. Occurrences are subdivided by enabling factor and flight phase designations. It is concluded that a larger risk of collision is associated with controller enabled departure transgressions over all other categories. The influence of this type is especially evident during the period following the air traffic controllers' strike of 1981. Causal analysis indicates that, coincidentally, controller enabled departure transgressions also, show the strongest correlations between causal factors. It shows that departure errors occur more often when visibility is reduced, and when multiple takeoff runways or intersection takeoffs are employed. In general, runway transgressions attributable to both pilot and controller errors arise from three problem areas: information transfer, awareness, and spatial judgement. Enhanced awareness by controllers will probably reduce controller enabled incidents.
Tarrel, Richard J.↗
Combined Experimental and Modeling Study of the Interactions of Acid Gas with Common Spacecraft Surfaces for Fire Safety Applications
A fire in a spacecraft poses detrimental consequences and risks mission success in addition to crew safety. This is compounded during long-duration missions when the crew has limited options to recover from a fire. A common spacecraft fire concern is the smoldering of wire insulation, typically made from Polyvinyl chloride (PVC) or Polytetrafluoroethylene (PTFE). This creates acid gases such as Hydrogen Chloride (HCl), Hydrogen Fluoride (HF) and Hydrogen Cyanide (HCN). These poisonous gases are hazardous to the crew. They also interact with common surfaces within the spacecraft more than dominant combustion products such as CO2 and H2O. This makes them more difficult to track for potential fire detection techniques, or for postfire clean-up. It is imperative to be able to understand and predict the fate of these poisonous species in a microgravity environment in order to design a safe vehicle. HCl interacts with a number of materials inside a spacecraft. Primary among these materials is aluminum, which is abundantly used due to its strong and light weight nature. Aluminum has a natural oxide layer that protects it from corrosion but is typically treated to enhance this oxide layer. Among these treatments is a chromate conversion coating (CCC), which provides a thin enough protective oxide layer to still conduct electricity, and a traditional anodized material that has a thicker oxide layer that does not conduct electricity. Nomex is another common material found inside a spacecraft. It is a flame-resistant woven polymer that is related to nylon. This commercially available material is used for cargo storage bags and as a fire barrier. Physics-based models were developed to predict the uptake of HCl by these materials. The ultimate objective of these models is to predict the fate of HCl within the spacecraft so that sensors can be placed in meaningful locations in future missions based on the model predictions. To support these modeling efforts, experiments were performed in a cast acrylic test cell that measured the difference between the inlet and outlet concentration of HCl after inserting a sample rod of the test material. Different uptake capacities were realized for each type of sample tested. A computational fluid dynamics model (CFD) model of the reactor was then constructed that used a one-step global reaction rate with calibratable reaction (or kinetic) constants. These constants were calibrated to match the HCl uptake on the CCC aluminum samples, and the same kinetic constants were then tested for the stock and anodized aluminum samples. Model predictions matched the experimental data for the stock aluminum, and to a much lesser extent, the anodized aluminum. The model was additionally validated at different flow rates, sample surface areas, and inlet concentrations, and showed good agreement for all stock and CCC samples. The model did not accurately predict the HCl uptake in the anodized samples compared to the other two types of aluminum. Adjusting the kinetic constants and transport properties did little to improve the prediction. X-Ray Photoelectron Spectroscopy (XPS) was used to determine that the oxide layer thickness of anodized aluminum is approximately 5,000 nm, compared to 250 nm for CCC and 50 nm for stock. XPS also revealed presence of chlorine further down in the aluminum oxide layer in anodized samples than CCC and stock samples after the samples were saturated with HCl, indicating that accounting for diffusion of HCl into the oxide layer is important for accurate prediction of HCl uptake onto anodized aluminum. Consequently, a multi-scale model was developed and tested. First, a single pore inside the anodized aluminum oxide layer was modeled and is referred to as the pore-scale model. In this model, HCl diffused through the pore and reacted with the aluminum oxide pore wall to create aluminum chloride. The sample was then saturated when the mass transfer resistance through the growing aluminum chloride layer became too large for the HCl to reach the aluminum oxide wall and continue the reaction. This pore-scale model was coupled to the reactor-scale model using a concentration-dependent diffusion coefficient, resulting in much more accurate predictions (approximately half the sum square error of the aforementioned reactor-scale model that produced good agreement for stock and CCC) for a variety of operating conditions. The amount of water vapor or relative humidity (RH) in the flow during a reactor experiment was determined to influence HCl uptake. Experiments were performed to understand the interaction of gaseous HCl with aluminum surfaces in the presence of water vapor. The results show that increasing levels of RH increased the capacity of aluminum to adsorb HCl but decreased the capacity of Nomex to uptake HCl. A series of tests were performed on individual aluminum samples after they had been saturated with a fixed concentration of HCl in dry air conditions with the goal of determining how their HCl uptake capacity changes after various treatments with water relative to the original saturation tests. HCl-saturated aluminum samples subjected to a second dry air flow at the same HCl concentration as the original test had an uptake of 23.5% of the original sample with no treatment in between. Saturated aluminum samples subjected to an air flow with a RH of 90% in between tests had an uptake of 35.6% of the original. Saturated aluminum samples submerged in distilled water for 12 hours in between tests had an uptake of 82.2% of the original sample. Previously saturated aluminum tested with HCl and a 50% RH air flow resulted in similar uptake characteristics in multiple repeated tests. The experiments show the profound effect water vapor has on HCl uptake onto aluminum surfaces. In the samples subjected to water vapor or liquid water, capillary condensation and capillary diffusion alters the transport of HCl significantly. A model was proposed that developed a relationship between RH and the coefficient of HCl diffusion in aluminum chloride. This produced an “S-shaped” curve with diffusion coefficient as a function of RH, with 45% RH represented as the point where the diffusion coefficient is halfway between no water saturation and 100% water saturation in the aluminum chloride product layer. No difference in uptake characteristics for the experiment or model were realized between 50% and 62% RH. The results from the large-scale microgravity experiment, Saffire, are discussed as they pertain to the fate of HCl throughout a spacecraft. HCl was released, both as a standalone event, and in concurrence with the burning of a structured cloth. These events only produced a small response in the far field HCl sensor, while a PMMA burn that did not produce HCl had a significantly greater response. A ground-based large-scale facility was constructed to flow acid gas at the scale and configuration realized in the Saffire experiments. A CFD model of this duct was constructed to test kinetic parameters developed in this work at a larger scale and different geometric configuration and to predict the results of the large-scale facility. The models developed in this work were used to interpret the results of the microgravity tests and lead the discussion on what further experiments and models are needed in order to predict the fate of acid gas in a spacecraft environment. To summarize, the major contributions of this work are as follows: the capacity to uptake HCl, with and without the presence of water vapor, was measured for a variety of real spacecraft surfaces. Several different models (single reactor-scale, multiscale, spacecraft-scale) were developed and with the aid of modeling, the rate of uptake for those surfaces was also predicted and validated. The kinetic parameters determined from the small-scale reactor experiments and models were used to predict large-scale and microgravity tests. Conclusions from this research will be used in the design of spacecraft vehicles and large-scale microgravity fire safety experiments. The models built by this work will aid designers in sensor placement and could be used to predict acid gas transport from fires in partial gravity, as would be seen in Lunar and Martian habitats.
fire safety↗
Advanced stitching technology
In the design of textile composites, the selection of materials and constructional techniques must be matched with product performance, productivity, and cost requirements. Constructional techniques vary. A classification of various textile composite systems is given. In general, the chopped fiber system is not suitable for structural composite applications because of fiber discontinuity, uncontrolled fiber orientation and a lack of fiber integration or entanglement. Linear filament yarn systems are acceptable for structural components which are exposed to simple tension in their applications. To qualify for more general use as structural components, filament yarn systems must be multi-directionally positioned. With the most sophisticated filament winding and laying techniques, however, the Type 2 systems have limited potential for general load-bearing applications because of a lack of filament integration or entanglement, which means vulnerability to splitting and delamination among filament layers. The laminar systems (Type 3) represented by a variety of simple fabrics (woven, knitted, braided and nonwoven) are especially suitable for load-bearing panels in flat form and for beams in a roled up to wound form. The totally integrated, advanced fabric system (Type 4) are thought to be the most reliable for general load-bearing applications because of fiber continuity and because of controlled multiaxial fiber orientation and entanglement. Consequently, the risk of splitting and delamination is minimized and practically omitted. Type 4 systems can be woven, knitted, braided or stitched through with very special equipment. Multiaxial fabric technologies are discussed.
Scardino, Frank L.↗
Environmental Impact Statement for the Cassini Mission
This Final Supplemental Environmental Impact Statement (FSEIS) to the 1995 Cassini mission Environmental Impact Statement (EIS) focuses on information recently made available from updated mission safety analyses. This information is pertinent to the consequence and risk analyses of potential accidents during the launch and cruise phases of the mission that were addressed in the EIS. The type of accidents evaluated are those which could potentially result in a release of plutonium dioxide from the three Radioisotope Thermoelectric Generators (RTGS) and the up to 129 Radioisotope Heater Units (RHUS) onboard the Cassini spacecraft. The RTGs use the heat of decay of plutonium dioxide to generate electric power for the spacecraft and instruments. The RHUs, each of which contains a small amount of plutonium dioxide, provide heat for controlling the thermal environment of the spacecraft and several of its instruments. The planned Cassini mission is an international cooperative effort of the National Aeronautics and Space Administration (NASA), the European Space Agency (ESA), and the Italian Space Agency (ASI) to conduct a 4-year scientific exploration of the planet Saturn, its atmosphere, moons, rings, and magnetosphere.
Source record↗
World, We Have Problems: Simulation for Large Complex, Risky Projects, and Events
Prior to a spacewalk during the NASA STS/129 mission in November 2009, Columbia Broadcasting System (CBS) correspondent William Harwood reported astronauts, "were awakened again", as they had been the day previously. Fearing something not properly connected was causing a leak, the crew, both on the ground and in space, stopped and checked everything. The alarm proved false. The crew did complete its work ahead of schedule, but the incident reminds us that correctly connecting hundreds and thousands of entities, subsystems and systems, finding leaks, loosening stuck valves, and adding replacements to very large complex systems over time does not occur magically. Everywhere major projects present similar pressures. Lives are at - risk. Responsibility is heavy. Large natural and human-created disasters introduce parallel difficulties as people work across boundaries their countries, disciplines, languages, and cultures with known immediate dangers as well as the unexpected. NASA has long accepted that when humans have to go where humans cannot go that simulation is the sole solution. The Agency uses simulation to achieve consensus, reduce ambiguity and uncertainty, understand problems, make decisions, support design, do planning and troubleshooting, as well as for operations, training, testing, and evaluation. Simulation is at the heart of all such complex systems, products, projects, programs, and events. Difficult, hazardous short and, especially, long-term activities have a persistent need for simulation from the first insight into a possibly workable idea or answer until the final report perhaps beyond our lifetime is put in the archive. With simulation we create a common mental model, try-out breakdowns of machinery or teamwork, and find opportunity for improvement. Lifecycle simulation proves to be increasingly important as risks and consequences intensify. Across the world, disasters are increasing. We anticipate more of them, as the results of global warming prove more and more ominous-glaciers melting in Bolivia, floods in Saudi Arabia, the Maldives sinking and salt rising along the Nile. Fear grows about potential asteroid crashes and nightly television images raise awareness of victims of floods, hurricanes, cyclones and typhoons, fire, tornado, tsunami, bombings, landslides, and cross-boundary criminality. The Red Cross says that disasters impact 250 million people each year. That means that 700,000 people are having a very bad day today. Modeling and simulation is and must be part of the solution.
Elfrey, Priscilla↗
Analysis of a Hypergolic Propellant Explosion During Processing of Launch Vehicles in the VAB
NASA is developing launch vehicles to support missions to Low Earth Orbit (LEO), the moon and deep space. Whether manned or unmanned, the vehicle components will likely be integrated in the Vehicle Assembly Building (VAB) at Kennedy Space Center (KSC) and typically include a fueled spacecraft (SC) that sits on top of one or more stages. The processing of a fueled SC involves hazardous operations when it is brought into the VAB Transfer Aisle and lifted a significant height for mating with lower stages. Accidents resulting from these hazardous operations could impact unrelated personnel working in buildings adjacent to the VAB. Safe separation distances based on the DOD Explosives Standards Quantity-Distance (Q-D) approach result in large IBD arcs. This paper presents site-specific air blast and fragmentation hazard analyses for comparison with the Q-D arcs as well as consequence and risk analyses to provide added information for the decision maker. A new physics-based fragmentation model is presented that includes: a) the development of a primary fragment list (which defines the fragment characteristics) associated with a hypergolic propellant explosion, b) a description of a 3D fragment bounce model, c) the results of probabilistic Monte-Carlo simulations (that include uncertainties in the fragment characteristics) to determine: i) the hazardous fragment density distance, ii) the expected number of wall/roof impacts and penetrations to over 40 buildings adjacent to the VAB, and iii) the risk to building occupants.
Chrostowski, Jon D.↗
Understanding Pre-Quantitative Risk in Projects
Standard approaches to risk management in projects depend on the ability of teams to identify risks and quantify the probabilities and consequences of these risks (e.g., the 5 x 5 risk matrix). However, long before quantification does - or even can - occur, and long after, teams make decisions based on their pre-quantitative understanding of risk. These decisions can have long-lasting impacts on the project. While significant research has looked at the process of how to quantify risk, our understanding of how teams conceive of and manage pre-quantitative risk is lacking. This paper introduces the concept of pre-quantitative risk and discusses the implications of addressing pre-quantitative risk in projects.
risk levels.↗
Genetic Algorithm-Based Optimization to Match Asteroid Energy Deposition Curves
An asteroid entering Earth's atmosphere deposits energy along its path due to thermal ablation and dissipative forces that can be measured by ground-based and spaceborne instruments. Inference of pre-entry asteroid properties and characterization of the atmospheric breakup is facilitated by using an analytic fragment-cloud model (FCM) in conjunction with a Genetic Algorithm (GA). This optimization technique is used to inversely solve for the asteroid's entry properties, such as diameter, density, strength, velocity, entry angle, and strength scaling, from simulations using FCM. The previous parameters' fitness evaluation involves minimizing error to ascertain the best match between the physics-based calculated energy deposition and the observed meteors. This steady-state GA provided sets of solutions agreeing with literature, such as the meteor from Chelyabinsk, Russia in 2013 and Tagish Lake, Canada in 2000, which were used as case studies in order to validate the optimization routine. The assisted exploration and exploitation of this multi-dimensional search space enables inference and uncertainty analysis that can inform studies of near-Earth asteroids and consequently improve risk assessment.
Depositio↗
CNTR: Explanation of Propellant Flow and Description of Initial Experiments
The Centrifugal Nuclear Thermal Rocket (CNTR) is one of few designs that could enable extremely rapid missions to Mars using currently available technologies. McCarthy conducted the first conceptual study of high performance nuclear thermal propulsion (NTP) and published his findings in 1954. High performance NTP was further investigated by Princeton researchers in the early 1960s and continued by other researchers throughout the 60s, 70s, and 80s. An interagency panel conducted in 1991 demonstrated the potential of liquid core nuclear rockets, such as the Liquid Annular Reactor System (LARS), to reach temperatures up to 5000 K and specific impulses (Isp) up to 2000 s. A more recent study of versatile NTP asserts that a similar propulsion system, the Centrifugal Gas Core Reactor (CGCR), can reach an estimated Isp of 1800 s[4]. An Isp of that magnitude significantly reduces travel times and consequently health risks to flight crews. The CNTR seeks to build on the work of previous liquid core NTP systems and aims to reach an Isp in the range of 1500 s to 1800 s while using hydrogen as the propellant. However, the CNTR is not limited to hydrogen and can instead utilize other volatiles such as ammonia, methane, or water at about half the Isp of hydrogen. This flexibility expands the CNTR’s mission range considerably by providing propellant storability and the potential for directly using volatiles available in-situ.
Nuclear Thermal Propulsion Human Mars↗
Applying a One Health Approach in Global Health and Medicine: Enhancing Involvement of Medical Schools and Global Health Centers
Multidisciplinary and multisectoral approaches such as One Health and related concepts (e.g., Planetary Health, EcoHealth) offer opportunities for synergistic expertise to address complex health threats. The connections between humans, animals, and the environment necessitate collaboration among sectors to comprehensively understand and reduce risks and consequences on health and wellbeing. One Health approaches are increasingly emphasized for national and international plans and strategies related to zoonotic diseases, food safety, antimicrobial resistance, and climate change, but to date, the possible applications in clinical practice and benefits impacting human health are largely missing.
Catherine Machalaba↗
Starfleet Medical: Knowledge Skills And Abilities Of Crew Medical Officers On Exploration Missions
Exploration missions increase the risk and consequences of medical events and require increased crew autonomy. This project makes use of an existing evidence base to determine the Knowledge, Skills, and Abilities (KSA) that an ExpLoration Medical Officer (ELMO) will need.
D R Levin↗
Starfleet Medical: Knowledge Skills and Abilities of Crew Medical Officers on Exploration Missions
Anticipating the medical skills necessary for deep space exploration missions is one of the greatest space medicine challenges. Spontaneous medical events unrelated to the space environment for which resourcing is severely limited. Novel medical events in the space environment for which are unknown unknowns. Exploration missions are remote, long duration, and low resource which increases the risk and consequences of medical events and require increased crew autonomy.
Levin, DR↗