SEARCH · Search NASA
Results for “Risk consequence”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Risk Sensitivity Study as the Basis for Risk-Informed Consequence-Based Setback Distances for Liquid Hydrogen Storage Systems
Explore the source record for details and available documents.
Quantitative Risk Assessment for Hydrogen-Powered Locomotive Refueling
Hydrogen powered locomotives are being explored to reduce emissions in rail applications. The risks of operations like refueling should be understood to ensure safe environments for workers and members of the public. Sensitivity analyses were conducted using HyRAM+ to identify major drivers of risk and compare effects of system parameters on individual risk. The consequences of jet fires from full-bore leaks dominated the risk, compared to explosions or smaller leaks. Pipe size, leak detection capability, and leak frequencies of system components greatly affected risk while overpressure modeling parameters and ambient conditions had little effect. The effects of personal protective equipment (PPE) materials on individual risk were quantified by reducing the individual’s exposure time or absorbed thermal dose. PPE only showed a risk reduction in low-risk cases. This study highlighted target areas for risk mitigation, including leak detection equipment and component maintenance, and indicated that the minimal effects of other parameters on risk may not justify prescriptive requirements for refueling operators.
BayoTech Risk and Modeling Support of NM Gas Site
The BayoTech hydrogen generation system has been evaluated in terms of safety considerations at the NM Gas site. The consequence of a leak in different components in the system was evaluated in terms of plume dispersion and overpressure. Additionally, the likelihood of a leak scenario for different hydrogen components was identified. The worst-case plume dispersion cases, full-bore leaks, resulted in relatively large plumes. However, these cases were noted to be far less likely than the partial break cases that were evaluated. The partial break cases resulted in nearly negligible plume lengths. Similarly, the overpressure analysis of the full-bore break scenarios resulted in much larger overpressures than the partial break cases (which resulted in negligible overpressure at the lot line). There were several cases evaluated in the analysis that represented leak scenarios from both hydrogen and natural gas sources. Generally, the natural gas leak scenarios resulted in a smaller horizontal impact than that of hydrogen leaks. The worst-case consequence from a hydrogen leak resulted from the compressors, storage pods, or dispensing system. To consider the safety features that may isolate the leak, the consequence was evaluated at different times after the leak event to show the reduction of pressure. After 2 seconds, the plume dispersion from this event is contained within the perimeter of the site. The worst-case consequences show that the plume may disperse to adjacent facilities and to the street. When considering both likelihood and consequence, the risk may be considered low because the maximum frequency of a full-bore leak from any component within the hydrogen compound is 8.2 E-5/yr. This means that a full-bore leak is expected to occur less than once every 10,000 years. The risk can be further reduced by implementing mitigative countermeasures, such as CMU walls along the sides of the equipment compound. This would reduce the overall consequence of the worst-case dispersion scenarios (horizontal impact of plume). In terms of siting and safety analysis, the NFPA 2 code was used to provide a high-level evaluation of the current site plan. The most limiting equipment in terms of set-back distance are the compressors/storage units because of the high-pressure hydrogen. The site layout was evaluated for an acceptable location for the compression/storage unit based on NFPA 2 set-back distances. It is important to note that the NFPA 2 set-back distances consider both likelihood and consequence. This is important because the worst-case results evaluated herein also represent the least likely leak scenario. Other site-specific considerations were evaluated, including the parking shade structure with photovoltaic cells and refueling vehicles. These issues were dispositioned and determined to not present a safety risk.
The path to 1.5 °C requires ratcheting of climate pledges
Using model simulations of high-ambition emissions pathways, we show that ratcheting—or increasing—climate ambition through 2030 will be crucial to limiting global peak temperature changes this century. Although updated pledges offered in advance of the Glasgow climate conference in 2021 meaningfully strengthened global ambition in 2030 compared to the 2015 Paris pledges, here, our study underscores the importance of countries ratcheting their 2030 pledges further to reduce the magnitude of temperature overshoot and consequently reduce the risks of irreversible and adverse consequences to natural and human systems.
Economic Model for Estimation of GDP Losses in the MACCS Offsite Consequence Analysis Code
The MACCS (MELCOR Accident Consequence Code System) code is the U.S. Nuclear Regulatory Commission (NRC) tool used to perform probabilistic health and economic consequence assessments for atmospheric releases of radionuclides. It is also used by international organizations, both reactor owners and regulators. It is intended and most commonly used for hypothetical accidents that could potentially occur in the future rather than to evaluate past accidents or to provide emergency response during an ongoing accident. It is designed to support probabilistic risk and consequence analyses and is used by the NRC, U.S. nuclear licensees, the Department of Energy, and international vendors, licensees, and regulators. This report describes the modeling framework, implementation, verification, and benchmarking of a GDP-based model for economic losses that has recently been developed as an alternative to the original cost-based economic loss model in MACCS. The GDP-based model has its roots in a code developed by Sandia National Laboratories for the Department of Homeland Security to estimate short-term losses from natural and manmade accidents, called the Regional Economic Accounting analysis tool (REAcct). This model was adapted and modified for MACCS and is now called the Regional Disruption Economic Impact Model (RDEIM). It is based on input-output theory, which is widely used in economic modeling. It accounts for direct losses to a disrupted region affected by an accident, indirect losses to the national economy due to disruption of the supply chain, and induced losses from reduced spending by displaced workers. RDEIM differs from REAcct in its treatment and estimation of indirect loss multipliers, elimination of double counting associated with inter-industry trade in the affected area, and that it is designed to be used to estimate impacts for extended periods that can occur from a major nuclear reactor accident, such as the one that occurred at the Fukushima Daiichi site in Japan. Most input-output models do not account for economic adaptation and recovery, and in this regard RDEIM differs from its parent, REAcct, because it allows for a user-definable national recovery period. Implementation of a recovery period was one of several recommendations made by an independent peer review panel to ensure that RDEIM is state-of-practice. For this and several other reasons, RDEIM differs from REAcct. Both the original and the RDEIM economic loss models account for costs from evacuation and relocation, decontamination, depreciation, and condemnation. Where the original model accounts for an expected rate of return, based on the value of property, that is lost during interdiction, the RDEIM model instead accounts for losses of GDP based on the industrial sectors located within a county. The original model includes costs for disposal of crops and milk that the RDEIM model currently does not, but these costs tend to contribute insignificantly to the overall losses. This document discusses three verification exercises to demonstrate that the RDEIM model is implemented correctly in MACCS. It also describes a benchmark study at five nuclear power plants chosen to represent the spectrum of U.S. commercial sites. The benchmarks provide perspective on the expected differences between the RDEIM and the original cost-based economic loss models. The RDEIM model is shown to consistently predict larger losses than the original model, probably in part because it accounts for national losses by including indirect and induced losses; whereas, the original model only accounts for regional losses. Nonetheless, the RDEIM model predicts losses that are remarkably consistent with the original cost-based model, differing by 16% at most for the five sites combined with three source terms considered in this benchmark.
Updated Economic Model for Estimation of GDP Losses in the MACCS Offsite Consequence Analysis Code RDEIM Model Report for MACCS v4.2
This report updates the Regional Disruption Economic Impact Model (RDEIM) GDP-based model described in Bixler et al. (2020) used in the MACCS accident consequence analysis code. MACCS is the U.S. Nuclear Regulatory Commission (NRC) used to perform probabilistic health and economic consequence assessments for atmospheric releases of radionuclides. It is also used by international organizations, both reactor owners and regulators. It is intended and most commonly used for hypothetical accidents that could potentially occur in the future rather than to evaluate past accidents or to provide emergency response during an ongoing accident. It is designed to support probabilistic risk and consequence analyses and is used by the NRC, U.S. nuclear licensees, the Department of Energy, and international vendors, licensees, and regulators. The update of the RDEIM model in version 4.2 expresses the national recovery calculation explicitly, rather than implicitly as in the previous version. The calculation of the total national GDP losses remains unchanged. However, anticipated gains from recovery are now allocated across all the GDP loss types – direct, indirect, and induced – whereas in version 4.1, all recovery gains were accounted for in the indirect loss type. To achieve this, we’ve introduced new methodology to streamline and simplify the calculation of all types of losses and recovery. In addition, RDEIM includes other kinds of losses, including tangible wealth. This includes loss of tangible assets (e.g., depreciation) and accident expenditures (e.g., decontamination). This document describes the updated RDEIM economic model and provides examples of loss and recovery calculation, results analysis, and presentation. Changes to the tangible cost calculation and accident expenditures are described in section 2.2. The updates to the RDEIM input-output (I-O) model are not expected to affect the final benchmark results Bixler et al. (2020), as the RDEIM calculation for the total national GDP losses remains unchanged. The reader is referred to the MACCS revision history for other cost modelling changes since version 4.0 that may affect the benchmark. RDEIM has its roots in a code developed by Sandia National Laboratories for the Department of Homeland Security to estimate short-term losses from natural and manmade accidents, called the Regional Economic Accounting analysis tool (REAcct). This model was adapted and modified for MACCS. It is based on I-O theory, which is widely used in economic modeling. It accounts for direct losses to a disrupted region affected by an accident, indirect losses to the national economy due to disruption of the supply chain, and induced losses from reduced spending by displaced workers. RDEIM differs from REAcct in in its treatment and estimation of indirect loss multipliers, elimination of double-counting associated with inter-industry trade in the affected area, and that it is intended to be used for extended periods that can occur from a major nuclear reactor accident, such as the one that occurred at the Fukushima Daiichi site in Japan. Most input-output models do not account for economic adaptation and recovery, and in this regard RDEIM differs from its parent, REAcct, because it allows for a user-definable national recovery period. Implementation of a recovery period was one of several recommendations made by an independent peer review panel to ensure that RDEIM is state-of-practice. For this and several other reasons, RDEIM differs from REAcct.
Resilience Framework for Electric Energy Delivery Systems (R.1)
The intent of this document is to provide a Resilience Framework for electrical energy delivery systems which can be applied to Distributed Wind. However, the framework is not limited by application to any resource or system. This framework represents the defined steps to a cyclical process similar in mechanism to both cybersecurity and risk frameworks, while providing a common set of language and process for all stakeholders involved. The need for this Resilience Framework was established in a previous document, “Distributed Wind Resilience Metrics for Electric Energy Delivery Systems.” One important characteristic we see in resilience is the unique needs and perspectives of different systems, geographies, resources, stakeholders, perceived risks, and consequences, which we term the distinctiveness property. This distinctiveness property drives the requirement to have a resilience framework or methodology that can be implemented by different types of organizations and systems. The process or methodology should be cyclic. Recognizing that a system’s resilience is based on finite resources and time, it must continually evolve through this framework’s risk management and capital investment steps at an appropriate pace for its distinctiveness property.
Impact of Nutrition on the Gut Microbiota: Implications for Parkinson’s Disease
Abstract Parkinson’s disease (PD) is a multifactorial neurodegenerative disease that is characterized by the degeneration of dopaminergic neurons in the substantia nigra pars compacta and by the anomalous accumulation of α-synuclein aggregates into Lewy bodies and Lewy neurites. Research suggests 2 distinct subtypes of PD: the brain-first subtype if the pathology arises from the brain and then spreads to the peripheral nervous system (PNS) and the body-first subtype, where the pathological process begins in the PNS and then spreads to the central nervous system. This review primarily focuses on the body-first subtype. The influence of the gut microbiota on the development of PD has been the subject of growing interest among researchers. It has been suggested that gut inflammation may be closely associated with pathogenesis in PD, therefore leading to the hypothesis that gut microbiota modulation could play a significant role in this process. Nutrition can influence gut health and alter the risk and progression of PD by altering inflammatory markers. This review provides an overview of recent research that correlates variations in gut microbiota composition between patients with PD and healthy individuals with the impact of certain nutrients and dietary patterns, including the Mediterranean diet, the Western diet, and the ketogenic diet. It explores how these diets influence gut microbiota composition and, consequently, the risk of PD. Last, it examines fecal transplantation and the use of prebiotics, probiotics, or synbiotics as potential therapeutic strategies to balance the gut microbiome, aiming to reduce the risk or delay the progression of PD.
A PROVEN APPROACH FOR EFFECTIVE COMPUTER SECURITY SELF-ASSESSMENTS AT NUCLEAR FACILITIES
A proven method for conducting cybersecurity self-assessments at nuclear power plants is now available for international use. This method was originally developed by Pacific Northwest National Laboratory, under the sponsorship of the U.S. Nuclear Regulatory Commission (NRC), for use at U.S. nuclear power plants. The “Method,” described in NUREG/CR-6847 “Cyber Security Self-Assessment Method for U.S. Nuclear Power Plants,” was originally a limited release document that was withheld from public disclosure but is now publicly available. The Method provides a systematic, phased, and risk-informed approach to help decision makers and security specialists understand their relative cybersecurity posture. Completed Method assessments may be used to support or validate selection of computer security controls to mitigate cyber threats as well as demonstrate compliance with regulations or statutes enacted by competent authorities. The Method assesses the cybersecurity posture of key systems at a nuclear facility with a focus on protection of design base functions. It considers both physical and digital elements of system vulnerabilities and the resulting potential consequences from exploitation. It is well-suited for addressing blended cyberattacks. A semi-quantitative analytical approach is used in the evaluation of potential vulnerabilities, consequences, and risks and provides a technical basis for the selection of security controls to mitigate cyberattacks. The Method’s application at U.S. nuclear power plants has been very encouraging. The only nuclear plant in the United States that did not have adverse findings during its initial NRC computer security inspection prepared for inspection through the diligent application of this self-assessment method and the implementation of recommendations that came out of that self-assessment. Nuclear facilities around the world might find application of the Method extremely helpful for making cost-effective, risk-based decisions regarding computer security and for preparing to pass computer security inspections by their competent authorities.
Consequence Based Framework for Deployment of Cloud Solutions in the Digital Energy Transition
This study proposes a framework for evaluating cloud computing deployment in the electric sector, focusing on the digital transition of energy systems. It assesses the implications of cloud technology adoption, particularly in terms of security, operational resilience, and efficiency. The paper introduces a method for consequence-driven risk analysis, enabling utilities to prioritize and mitigate potential threats effectively. It also discusses the shared responsibility model in cloud computing, highlighting the need for collaborative security efforts. The research aims to provide utilities with a strategic assessment tool for cloud adoption, emphasizing the importance of security culture in enhancing cloud computing's role in critical infrastructure.
Impact of Pressure-Dependent Interfacial Tension and Contact Angle on Capillary Heterogeneity Trapping of CO2 in Storage Aquifers
Summary Carbon dioxide (CO2) capillary trapping increases the total amount of CO2 that can be effectively immobilized in storage aquifers. This trapping, manifesting itself as accumulated CO2 columns at a continuum scale, is because of capillary threshold effects that occur below low-permeability barriers. Considering that capillary pressure is dictated by heterogeneous pore throat size, the trapped CO2 column height and associated CO2 saturation will vary spatially within a storage aquifer. This variation will be influenced by two pressure-dependent interfacial parameters—CO2/brine interfacial tension (IFT) and CO2/brine/rock contact angle. Our objective is to understand how the pressure dependence of these two parameters affects the heterogeneity of capillary trapped CO2 at a continuum scale. Our conceptual model is a 1D two-zone system with the upper zone being a flow barrier (low permeability) and the lower zone being a flow path (high permeability). The inputs to this model include microfacies-dependent capillary pressure vs. saturation curves and permeability values. The input capillary pressure curves were collected in the literature that represents carbonate microfacies (e.g., dolograinstone) in a prevalent formation in the Permian Basin. We then used the Leverett j-function to scale the capillary pressure curve for the two zones that are assigned with the same or different microfacies. During scaling, we considered the influence of pressure on both the IFT and contact angle of CO2/brine/dolomite systems. We varied the zone permeability contrast ratio from 2 to 50. We then assumed capillary gravity equilibriums and calculated the CO2 saturation buildup corresponding to various trapped CO2 column heights. The CO2 saturation buildup is defined as the CO2 saturation in the lower layer minus that in the upper one. We found that the saturation buildup can be doubled when varying pressure in a storage aquifer, after considering pressure-dependent IFT and contact angles. Thus, assuming these two parameters to be constant across such aquifers would cause large errors in the quantification of capillary trapping of CO2. The whole study demonstrates the importance of considering pressure-dependent interfacial properties in predicting the vertical distribution of capillary trapped CO2. It has important implications in developing a better understanding of leakage risks and consequent storage safety.
The Resilience Planning Landscape for Communities and Electric Utilities
Synapse Energy Economics has conducted structured interviews to better characterize the current landscape of resilience planning within and across jurisdictions. Synapse interviewed representatives of a diverse group of communities and their electric utilities. The resulting case studies span geographies and utility regulatory structures and represent a range of threats. They also vary in terms of population density and size. This report summarizes our approach and the findings gleaned from these conversations. All the communities and utilities we interviewed see increased interest in and commitment of resources for energy-related resilience. The risks and consequences these communities and utilities faced in the past, face now, and will face in the future drove them to improve engagement, advance processes, further decision-making, and in many cases invest in projects. While no process used by communities and utilities was the same, the different processes used by communities and utilities allowed each one to make progress in its own way. Several approaches are emerging that can provide good models for other communities and utilities with an interest in improving resilience.
Quantifying Uncertainty in PV Energy Estimates Final Report
Uncertainty in PV energy estimates is "one of the most critical areas of lack of understanding" according to independent engineers, financiers, PV model developers, and other industry stakeholders. The primary problem is a lack of rigorous, transparent, widely accepted methods for quantifying uncertainty in energy production estimates. Uncertainty in energy production estimates arises from variability of the solar resource, inexact PV performance models and their parameters, and system reliability considerations. Uncertainty in annual energy production is frequently calculated for larger projects in order to quantify financial risk. Key statistics for energy, such as the P-values "P50" and "P90" (the annual energy values that are exceeded in future years with 50\% and 90\% probability, respectively) are used by financing institutions to calculate the repayment risk for the project. The current methods to estimate these statistics are typically proprietary, specialized, and involve significant post-processing of commercial performance model results. This black-box approach leads to inconsistent P-value estimates from different parties, which reduces investors' confidence in the results. Since the financial community bases its risk assessment on these estimates, reduced confidence increases perceived project risk, and consequently financing costs. The goal of this project was to establish a set of best practices for quantifying uncertainty in energy production estimates, including identifying what sources of uncertainty must be considered with clear definitions and metrics, determining which sources are the biggest drivers of uncertainty, and providing a computationally efficient framework for combining different sources of uncertainty that is flexible enough to accommodate substitutions of data or methods when better information is available. We engaged a wide set of stakeholders to ensure industry endorsement and adoption, and leveraged complementary projects investigating individual sources of uncertainty in great detail, as well as others' work that started down this path.
Data Management for Digital Twin Implementation: Enhancing Existing SCADA Architecture for INL's CITRC Test Distribution System
The United States power grid will continue to experience stress from aging infrastructure, extreme weather, and increasing loads. In order to strengthen resiliency, researchers need to run tests and simulations that model real-life infrastructure. Idaho National Laboratory (INL) is creating a digital twin of its Critical Infrastructure Test Range Complex (CITRC). CITRC is an at-scale grid testbed which can be configured in utility-realistic distribution scenarios for a variety of tests, such as advanced grid protection and control. A digital twin of this infrastructure would support in-depth tests/simulations without risking physical consequences, before trialing devices under test at-scale. This project focuses on the data acquisition part of constructing a digital twin. It investigates the Supervisory Data Acquisition and Control (SCADA) system of CITRC and explores ways to utilize this system for the twin. Future “ideal” at-scale implementations such as upgraded equipment, modern communication protocols, and automation applications are also explored.
Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA
In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.
Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA
In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.