Search NASA⌕ Search

SEARCH · Search NASA

Results for “hazard analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Performance assessment of near-fault buildings subjected to physics-based simulated earthquake ground motions with fling step

The effects of the co-seismic static offset (known as fling step) and associated velocity pulses on civil structures have been difficult to study because the static offset is typically removed during the processing of earthquake ground motion records. Simulated ground motions contain fling features and require no processing; therefore, they create new opportunities for representing fling features in seismic hazard analysis and assessing their influence on the seismic demands on near-fault structures. We use physics-based fault rupture simulations to study the characteristics of ground motions with fling step and the sensitivity of the near-fault structural demands to strong fling features. We uncover that simulated ground motions with a large fling step tend to have higher spectral intensity than those without a fling step at the same rupture distance, especially at periods longer than 2 s. As a result, the structural demands on flexible buildings tend to be the most sensitive to the fling features. Statistical analysis suggests that the ground motion spectral shape (represented by spectral accelerations at multiple periods) is—in most cases—a sufficient predictor of the structural demands on near-fault low-rise and mid-rise buildings at locations that are susceptible to strong fling effects. Finally, ground motion record selection experiments reveal that representing the spectral shape features at periods that are most relevant to a given structure may be an effective strategy to reduce the bias in the estimated demands on near-fault long-period structures when the available database of records is considered deficient in fling features.

Fling step↗
DOE OSTI2026

A Nonergodic Ground-Motion Model for the San Francisco Bay Area for Small-Magnitude Earthquakes

ABSTRACT Recently, generative models have become a computationally efficient alternative to physics-based numerical simulations of ground motions. Neural networks can learn from existing ground-motion data to generate unobserved ground-motion data at new source and site locations. A key challenge with generative models is ensuring that predicted ground motions remain within a physically realistic range. For this purpose, we developed an empirical, nonergodic ground-motion model (GMM) for small-magnitude earthquakes in the San Francisco Bay area based on about 5000 recordings per component for Mw ≤ 4 earthquakes. The nonergodic GMM predicts spatially varying median source, site, and path effects for both the Fourier amplitude spectrum (FAS) and the Fourier phase derivative (a proxy for duration), as well as the corresponding epistemic uncertainty for each term. For FAS, our model shows above-average source and site effects in the western part of the region and below-average effects in the eastern part, with regional effects exhibiting larger spatial correlation lengths with increasing frequency. For duration, the source term is negligible for small-magnitude earthquakes, and the site term leads to site-specific variations up to 5 s. Path effects for FAS and duration depend on the source–site pair and are extrapolated spatially using recent methods for path-effect modeling. The aleatory variability of the within-site within-path residuals is similar to the variability found in previous studies for other regions. The nonergodic model provides two key contributions: first, median adjustment terms that are transferable to larger magnitude earthquakes, further reducing aleatory variability in probabilistic seismic hazard analysis; second, region-specific criteria for validating machine learning-based ground-motion generators to evaluate whether synthetic ground motions exhibit physically realistic source, site, and path effects.

Lacour, Maxime↗
DOE OSTI2025

Applying Machine Learning and Bayesian Inference to Identify and Locate Moving Anthropogenic Sources Using Distributed Acoustic Sensing Data

Distributed acoustic sensing (DAS) systems, which use existing telecommunication fibers, offer high‐resolution capabilities ideal for recording anthropogenic sources. However, the complexity of urban environments and the large amount of data recorded by DAS require automated methods to efficiently detect and categorize anthropogenic sources. Here, we evaluate how well three machine learning models (k‐nearest neighbor [k‐NN], convolutional neural networks, and recurrent‐convolutional neural networks) can identify various anthropogenic sources recorded by DAS. Our findings reveal that both k‐NN and neural network methods perform well in high signal‐to‐noise ratio (SNR) settings. However, their accuracy decreases at SNRs <4. We also use Kalman filtering, a form of Bayesian inference, on backprojected locations of these sources to recover locations that generally fall within standard smartphone Global Positioning System errors. By combining machine learning and Kalman filter results, we calculate a multidimensional model of moving anthropogenic sources. These results demonstrate the potential of DAS data in urban seismology for accurately identifying and locating such sources. Depending on the research objectives, these sources can be further studied or filtered out to improve the quality of seismic data for earthquake studies. Such methods provide a valuable tool for urban seismology and seismic hazard analysis.

Luckie, Thomas William [Sandia National Laboratori↗
DOE OSTI2024

Comparative study of decay heat calculations with FLUKA and MCNP/CINDER2008

In designing a high-power tungsten target, decay heat driven temperature rise in the spallation volume is a safety concern during maintenance and in loss of coolant accidents. As tungsten hydrates and becomes volatile in steam at above 800 ◦C, it is important to keep the target temperature below this threshold when active cooling is unavailable. Decay heat in a target is calculated with particle transport simulation codes combined with transmutation codes. The calculated decay heat usually differs depending on the nuclear cross sections and the decay particle transport models built in the code architecture. In this paper, we calculated decay heat of a water-cooled tungsten target using popular particle transport codes, FLUKA and MCNP6® paired with CINDER2008 and compared the results. The target-moderator-reflector (TMR) system is modeled with a water-cooled solid tungsten target, water premoderators, liquid hydrogen cold moderators and beryllium reflectors. Water-cooled stainless-steel shielding is modeled around the TMR system. The tungsten volume is clad with a thin layer of erosion/corrosion resistant material. This study provides information about the uncertainty range in decay heat prediction of high-power spallation targets for hazard analysis.

Lee, Yong Joong↗
DOE OSTI2026

Synthetic Atmospheric River Ensembles Generated by Deep-AR

This dataset contains 35,850 synthetic landfalling atmospheric river (AR) realizations generated by the Deep-AR two-stage deep-learning framework over the Northeast Pacific and U.S. West Coast. The archive contains 25 stochastic ensemble members for each of 1,434 held-out observed seed events. Each synthetic realization is initialized from conditions 48 hours before the corresponding observed AR landfall and is generated autoregressively at 6-hour intervals over a 144-hour period. Deep-AR combines a deterministic residual network (ResNet) that advances the large-scale atmospheric state with a Wasserstein generative adversarial network (WGAN) that produces stochastic, high-resolution fields. Each HDF5 file contains 0.25° gridded synthetic integrated vapor transport components (qu, qv), 10 m wind components (u10, v10), and 6-hour accumulated precipitation on a common 200 × 480 grid. The files also include coordinate and datetime arrays. This dataset supports AR hazard analysis, ensemble-based uncertainty characterization, precipitation-extremes research, and regional stress testing. Synthetic files follow the naming convention deepar.model.YYYYMMDD.HHMMSS.vNN.h5. YYYYMMDD.HHMMSS identifies the UTC initial-condition timestamp, which occurs 48 hours before the diagnosed observed landfall, and vNN identifies the zero-padded ensemble member, ranging from v01 through v25. Each synthetic file can be paired with its corresponding observed file by matching the initial-condition timestamp. The paired observed file follows the naming convention deepar.obs.YYYYMMDD.HHMMSS.h5 and is available in the separately registered oracle/deepar.obs dataset at https://wdh.energy.gov/ds/oracle/deepar.obs (DOI: https://doi.org/10.21947/3377671).

17 WIND ENERGY↗
DOE OSTI2026

Observed Atmospheric River Events

This dataset contains observed landfalling atmospheric river (AR) events over the Northeast Pacific and U.S. West Coast used to initialize and evaluate the Deep-AR synthetic atmospheric river framework. It includes 1,434 held-out events whose observed records begin 48 hours before diagnosed AR landfall and continue at 6-hour intervals over a 144-hour event window. Each HDF5 file provides high-resolution 0.25° gridded fields of integrated vapor transport components (qu, qv), 10 m wind components (u10, v10), and 6-hour accumulated precipitation. IVT components and precipitation are sourced from EDARA; 10 m winds are sourced from ERA5. The records share a common 200 × 480 grid over the Northeast Pacific and U.S. West Coast and include coordinate and datetime arrays. These events support atmospheric-river hazard analysis, evaluation of synthetic event generation, precipitation-extremes research, and regional stress testing.

17 WIND ENERGY↗
DOE OSTI2025

Computationally Selected Multivalent HIV-1 Subtype C Vaccine Protects Against Heterologous SHIV Challenge

Background: The RV144 trial in Thailand is the only HIV-1 vaccine efficacy trial to date to demonstrate any efficacy. Genetic signatures suggested that antibodies targeting the variable loop 2 (V2) of the HIV-1 envelope played an important protective role. The ALVAC prime and protein boost follow-up trial in southern Africa (HVTN702) failed to show any efficacy. One hypothesis for this is the greater diversity of subtype C viruses in southern Africa relative to CRF01_AE in Thailand. Methods: Here, we determined whether an ALVAC prime with computationally selected gp120 boost immunogens maximizing coverage of diversity of subtype C viruses in the variable V1 and V2 regions (V1V2) improved the protection of non-human primates (NHPs) from a heterologous subtype C SHIV challenge compared to more traditional regimens. Results: An ALVAC prime with Trivalent subtype C gp120 boosts resulted in statistically significant protection from repeated intrarectal SHIV challenges compared to the control. Evaluation of the immunogenicity of each vaccine regimen at the time of challenge demonstrated that different gp120 combination boosts elicited similar high magnitudes of gp120 and breadth of V1V2-binding antibodies, as well as strong Fc-mediated immune responses. Low-to-no neutralization of the challenge virus was detected. A Cox proportional hazard analysis of five pre-selected immune parameters at the time of challenge identified ADCC against the challenge envelope as a correlate of protection. Systems serology analysis revealed that immune responses elicited by the different vaccine regimens were distinct and identified further correlates of resistance to infection. Conclusions: Computationally designed vaccines with maximized subtype C V1V2 coverage mediated protection of NHPs from a heterologous Tier-2 subtype C SHIV challenge.

Immunology↗
DOE OSTI2024

Visualizing a Vulnerability: Its Connections to Hardware and Software

All Hazards Analysis (AHA) is a framework developed by Idaho National Laboratory that provides capabilities to collect, store, analyze, and visualize critical infrastructure information. A core function of AHA is its ability to simulate faults or outages in networks of infrastructure originating from a plethora of causes, ranging from natural disasters to cyberattacks. AHA utilizes Hardware and Software Bills of Material (HBOM and SBOM, respectively) along with Known Exploited Vulnerabilities (KEVs) to document the potential attack vectors for each piece of infrastructure. The objective of this contribution to AHA was to create a visualization tool that could capture the small details held in each individual artifact as well as preserve the large-scale connections that link them together to aid threat modeling.

58 GEOSCIENCES↗
DOE OSTI2026

Hazard and risk analysis framework for nuclear power plant–based integrated energy systems

Employing integrated energy systems (IESs) with nuclear power plants (NPPs) can improve NPP utilization by leveraging dedicated thermal and electric power delivery, but it may also increase operational safety risks. This paper presents a framework to identify and quantify hazards and risks for such IESs. The framework combines accidentology to review past industrial accidents with failure modes and effects analysis (FMEA) to identify potential future incidents. Hydrogen explosion and toxic chemical release hazards are of particular concern. Explosion consequences are quantified using the Bauwens-Dorofeev (Bauwens) and trinitrotoluene equivalent mass (TNT-EM) methods, while chemical release consequences are computed using the Gaussian atmospheric dispersion method. Operational disturbances from direct electrical and thermal integration that may affect NPP safety are modeled using probabilistic risk analysis (PRA). Hazards and risks are then evaluated for regulatory compliance. The framework is applied to IESs comprising pressurized or boiling water reactors supplying three levels of thermal and electrical power to industrial customers. Case studies include high-temperature steam electrolysis hydrogen plants of varying capacities and a synthetic fuel production plant. Sensitivity analysis examines piping component failures in the PRA model as a precursor to cost estimation for thermal extraction line design. Additionally, Fussel-Vessely (FV) and risk increase importance (RII) measures identify risk-informed design improvements for the thermal extraction system. FMEA highlights hazards such as loss of offsite power, prompt loss of electrical load, loss of thermal output, and immediate steam diversion, in addition to hydrogen explosions and toxic chemical releases. Both Bauwens and TNT-EM methods suggest maintaining several hundred meters of separation between the NPP and hydrogen facility to mitigate explosion risks. PRA results show a maximum initiating event frequency increase of 1.15% and an overall risk increase of 0.28%. Importance measure analysis identifies upstream pipe leak isolation components as critical. Evaluating the results against safety regulations, it is concluded that hazards and risks can be managed to comply with regulations through risk-informed thermal and electrical connection designs, component selection, maintenance programs, and safe separation distances between NPPs and integrated industrial facilities.

08 - HYDROGEN↗
DOE OSTI2025

Hazard and Operability Analysis for Operating, Refueling, and Maintenance of Fuel Cell Electric Buses

​​Since hydrogen vehicles can be implemented in heavy-duty transportation applications such as buses, it is important to understand safety hazards and risks of hydrogen fuel cell electric bus (FCEB) and refueling technology. We conducted a hazard and operability analysis for FCEB operation/driving, refueling, and maintenance/inspection. We identified failure modes and consequences and defined a qualitative risk metric as the product of the likelihood of a failure and the severity of the worst-ca

08 HYDROGEN↗
DOE OSTI2025

Idaho National Laboratory CY 2024 National Emission Standards for Hazardous Air Pollutants Analysis, Methodology, and Results for Radionuclides

This report documents the methodology and results for calculating the effective dose equivalent (EDE) to the maximally exposed individual (MEI) from atmospheric radionuclide emissions from Idaho National Laboratory (INL) sources in Calendar Year (CY) 2024. The calculations were performed in accordance with requirements in Code of Federal Regulations (CFR), Title 40, “Protection of the Environment,” Part 61, “National Emission Standards for Hazardous Air Pollutants (NESHAPs),” Subpart H, “National Emission Standards for Emissions of Radionuclides Other than Radon from Department of Energy Facilities” (40 CFR 61, Subpart H). UDFs were calculated using the computer model CAP88-PC for unit (1 Ci/yr) emission rates at INL Site facilities and INL in-town (Idaho Falls) facilities and stored in Microsoft Access databases. The UDFs—in this case, mrem/Ci—were then combined with radionuclide-specific release (emission) rates for each facility-specific source to compute doses at predetermined public receptor locations, including the MEI locations. This report contains the dose results and a description of the methodology and tools used to compute the doses.

07 - ISOTOPES AND RADIATION SOURCES↗
DOE OSTI2026

Idaho National Laboratory CY 2025 National Emission Standards for Hazardous Air Pollutants Analysis, Methodology, and Results for Radionuclides

This report details calculations of potential dose—at public receptor locations surrounding the Idaho National Laboratory (INL) Site boundary and INL in-town facilities—from radionuclides reported to be in use and potentially emitted from INL facilities during calendar year (CY) 2025. All calculations were performed in accordance with the requirements of Code of Federal Regulations (CFR), Title 40, “Protection of the Environment,” Part 61, “National Emission Standards for Hazardous Air Pollutants (NESHAPs),” Subpart H, “National Emission Standards for Emissions of Radionuclides Other than Radon from Department of Energy Facilities” (40 CFR 61, Subpart H). Modeling methodology, model-input parameters, and contribution to dose by facility, source, and radionuclide at the maximally exposed individual (MEI) location are also discussed. The information in this report supports the “National Emission Standards for Hazardous Air Pollutants—Calendar Year 2025 INL Report for Radionuclides” (DOE-ID 2026). During CY 2025, the estimated annual potential dose at the INL Site MEI location was 2.45E-02 mrem/yr, up from the previous year, but remaining far less than the regulatory standard of 10 mrem/yr (CFR 40 Part 61, Subpart H). Approximately 92% of the total dose to the INL Site MEI originated from Materials and Fuels Complex sources. Emissions from INL in-town facilities resulted in an estimated annual potential dose of 4.50E-03 mrem/yr to the MEI, down slightly from the CY 2024 estimated dose. Year-to-year variations in estimated annual dose can be attributed to adjustments in laboratory operations, changes to facility infrastructure, and variation in meteorological conditions.

42 - ENGINEERING↗
DOE OSTI2024

Advancing process-based flood frequency analysis for assessing flood hazard and population flood exposure

Recent studies have showcased the use of process-based hydrological models with Stochastic Storm Transposition (SST) techniques to conduct Flood Frequency Analysis (FFA). This framework, referred hereby FFA-SST, has proved to be a robust strategy to estimate peak flows of specific annual exceedance probability (e.g., 100-year peak flow) that can reflect natural and anthropogenic disturbances, including changes in land use and meteorological patterns. With the objective of advancing the FFA-SST framework, this study presents for the first time the use of an Integrated Surface-Subsurface Hydrological Model (ISSHM) to conduct FFA-SST by extending the analysis from peak flow responses to flood extent, enabling a unique view and analysis of flood hazard and population flood exposure at the basin scale. As a proof-of-concept, we used the ISSHM, Advanced Terrestrial Simulator (Amanzi-ATS) model, and the SST model, RainyDay, to conduct FFA-SST by simulating the flood response to 5,000 annual synthetic storm events in a 2,227 $km^2$ Southeast Texas watershed. We demonstrate that ATS, without site-specific calibration, provides a robust process-based representation of peak flows, flood extent, streamflow, evapotranspiration, soil moisture content, and water storage changes. Our results and analyses, covering frequency curves up to a 500-year return period for peak flows, basin inundation fractions, and the number of people exposed to flooding, offer a unique perspective to analyze flood impacts across spatial scales. Overall, this study provides critical insights for flood risk management by extending the FFA-SST framework to include both flood hazard and population flood exposure analyses at the basin scale. Such an approach will empower stakeholders and disaster emergency agencies with a more comprehensive understanding of flood impacts across the entire basin domain, facilitating informed decision-making for flood risk assessment and management.

58 GEOSCIENCES↗
DOE OSTI1975

Nuclear Safety [Vol. 16, No. 2, March-April 1975]

Nuclear Safety covers significant developments in the field of nuclear safety. The scope is limited to topics relevant to the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, safety considerations in regard to the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 127 Quality Assurance in the Construction of Nuclear Power Plants by Sidney A. Bernsen, 141 1974 ANS Topical Meeting on Fast Reactor Safety by M. H. Fontana; CONTROL AND INSTRUMENTATION: 150 GBR-4 Protection Systems: Failures and Their Consequences by Peter Burgsmüller, J. J. Dekais, Albert Krähe, Raffaello Pignatelli, and Gottfried Vieider, 162 Standby Emergency Power Systems. Part 2—The Later Plants by E. W. Hagen; PLANT SAFETY FEATURES: 180 Radiotoxic Hazard Measure for Buried Solid Radioactive Waste by J. Hamstra, 190 The Thirteenth AEC Air-Cleaning Conference by D. W. Moeller, D. W. Underhill, and M. W. First, 203 Book Review: Nuclear Criticality Safety; CONSEQUENCES OF EFFLUENT RELEASE: 204 Environmental Radiation Effects of Nuclear Facilities in New York State by M. S. Terpilak and B. L. Jorgensen, 222 Book Review: Thermal Ecology; OPERATING EXPERIENCES: 223 Set-Point Drift in Nuclear Power-Plant Safety-Related Instrumentation Adapted by the Nuclear Safety Staff, 224 Diesel-Generator Operating Experience at Nuclear Power Plants, 227 Summary of Operating U. S. Power Reactors as of Jan. 1, 1975, 232 Selected Safety-Related Occurrences Reported in November and December 1974 Compiled by William R. Casto, 235 Recent Occurrences at Nuclear Reactors and Their Causes Compiled by William R. Casto; CURRENT EVENTS: 243 General Administrative Activities Compiled by Wm. B. Cottrell, 251 Action on Power-Reactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B. Cottrell, 266 Action on Nonreactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B Cottrell, 268 Proposed Rule Changes as of Jan. 1, 1975; MISCELLANY: 149 Course in Italy on High-Energy Radiation Dosimetry and Protection (Announcement), 250 Course at Northwestern on Safety of Light-Water-Cooled Nuclear Power Plants (Announcement), 266 Symposium of the Combined Effects on the Environment of Radioactive, Chemical, and Thermal Releases from the Nuclear Industry (Announcement), 271 Short Course on Engineering for Extreme Winds and Tornadoes (Announcement), 272 Three 1-Week Courses at MIT on Nuclear Power-Reactor Safety (Announcement), 272 Harvard University Short Courses (Announcement).

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI1996

Nuclear Safety [Vol. 37, No. 3, July-September 1996]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS 181 Attitudes and Practices Regarding Disposal of Liquid Nuclear Waste at Clinton Laboratories in the Very Early Years: A Historical Analysis, S. H. Stow; 202 Off-Site Nuclear Emergency Management in Germany Under the Auspices of the Federal Structure, A. Bayer, S. Bittner, and H. Korn; DESIGN FEATURES: 211 Twenty-Fourth DOE/NRC Nuclear Air-Cleaning and Treatment Conference, R. R. Bellamy, J. J. Hayes, R. D. Porco, and M. W. First; OPERATING EXPERIENCES: 222 Explosion in the Tomsk-7 Reprocessing Plant on April 6, 1993, M. L. Hyder, W. G. Lussie, and F. E. Witmer; 234 Reactor Shutdown Experience, Compiled by J. W. Cletcher; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 237 Assessment of Spent Fuel Cooling, J. G. Ibarra, W. R. Jones, G. F. Lanik, H. L. Ornstein, and S. V. Pullani; RECENT DEVELOPMENTS: 256 Reports, Standards, and Safety Guides, D. S. Queener; 260 Proposed Rule Changes as of June 30, 1996; ANNOUNCEMENTS: 210 Tennessee Industries Week; 221 21st International Symposium on The Scientific Basis for Nuclear Waste Management; 259 IAEA Programme of Scientific Meetings for 1997; 270 PSAM 4 (International Conference on Probabilistic Safety Assessment and Management); 265 The Authors; 268 Errata.

05 NUCLEAR FUELS↗
DOE OSTI2026

Mapping Philadelphia's Floodscape: A 35‐Year Analysis of Coastal Urban Flood Hazards and Drivers

Low-lying coastal urban cities face significant flooding risks from river flooding (fluvial), storm surges and high tides (coastal), and intense local rainfall (pluvial). Accurately assessing these hazards requires modeling frameworks capable of capturing both the individual and combined effects of multiple flood drivers, as well as the diversity of flood scenarios that can arise from their interactions. In this study, we implemented a physics-based, high-resolution modeling approach to assess flood hazards in Philadelphia, PA, a coastal city exemplifying multi-driver flood risks over multiple decades (1985–2019), by simulating a wide range of flood events at a 10-m resolution. By integrating watershed, coastal, and urban flood models, we explicitly resolved the interaction between fluvial, pluvial, and coastal processes across the city. From these simulations, we identified flood hazard hotspots and systematically attributed the primary drivers of flooding for each event. The results suggested that 44% of Philadelphia's flood events were compound floods, primarily driven by fluvial-surge and fluvial-pluvial combinations. Notably, 77% of these events involved fluvial flooding, either as a single flood driver or in combination with other drivers, underscoring the dominant role of riverine processes in the city's flood hazard. Overall, this study demonstrates the value of a comprehensive, process-based approach for urban flood hazard assessment and highlights the importance of considering the full spectrum of flood scenarios to inform targeted and adaptive flood management strategies in coastal cities.

Compound flooding↗
DOE OSTI2024

Enhancing Cloud Cybersecurity: Prescriptive Controls for Operational Technology

This whitepaper provides strategic insights and recommendations into security cloud-based solutions for electric utilities, encompassing operational technology (OT), virtual power plants (VPP), distributed energy resources (DERs), applications, networks, and data storage as they transition to and leverage cloud infrastructure through managed service providers (MSPs) and cloud service providers (CSPs). Principles derived from established frameworks serve as a foundation for best practices across cybersecurity projects and remove the constraints of settling on a single framework. For organizations that prefer not to integrate a specific framework altogether, elements of the proposed approach could be adopted or tailored to best fit defined requirements and expected functionalities. The Cirrus assessment, a utility cloud feasibility tool, and the roadmap it provides serve as a precursor to this paper, which seeks to be a valuable resource for defining next steps following cloud technology integration feasibility appraisal. With its comprehensive approach to adoption, the Cirrus framework offers strategic guidance on responsibly preparing for or deploying a utility cloud solution. The previously published whitepaper, “Use Case-Informed Framework for Utility Cloud Migration,” details the guiding strategy, research, and deployment of cloud solutions within electric and interconnected grid systems. Before implementing the controls suggested in this document, it is recommended that stakeholders complete Cirrus's cloud integration assessment and pair the results with their unique cybersecurity controls to form a comprehensive cloud-based utility cybersecurity plan. The Cirrus outcome will consider a series of future architectures for the grid before and after the energy transition and evaluate the arguments for and against cloud applications for each electric and interconnected grid layer. This document is a companion to the original whitepaper, "Use Case-Informed Framework for Utility Cloud Migration" to further identify and recommend security controls based on Cirrus’s cloud integration assessment output. The following whitepaper outlines the cybersecurity controls that secure cloud-service models pertinent to the electric sector using the predefined categories identify, protect, detect, and respond and recover. The objective is to outline prescriptive security controls based on the type of architecture and data stored in the cloud. The focus includes dissecting the shared responsibility model and elucidating what on-premises Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) entail. A pivotal consideration in this context is allocating responsibility for foundational cybersecurity aspects—having used Cirrus for the cloud integration assessment. The ensuing controls detailed herein also represent a checklist of controls necessary for a secure cloud transition, equipping utilities with the knowledge to navigate this digital transformation with confidence and strategic foresight in a safe and responsible manner.

42 ENGINEERING↗