Search NASA⌕ Search

SEARCH · Search NASA

Results for “Assurance Cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20
All sourcesNASA NTRSDOE OSTI
NASA NTRS2012

NASA Electronic Parts and Packaging (NEPP) Program

Recent Findings from Audits, New Technology Data Reviews a) Disabled Chip Burn-ins A recent audit for a QML device discovered that the chip was disabled during the static burn-in, thus it was not drawing any current. Recommendation: For new SMDs add a statement within the burn-in paragraphs stating that the parts shall be kept in their enabled state during the burn-in. b) Class Q 160-hr/125oC Burn-in This is being interpreted as a static burn-in (even for CMOS technology). Recommendation: Provide clarification in MIL-STD-883, Test Method 5004. c) At Frequency (Dynamic) Burn-ins Test equipment limitation is being cited for not doing burn-ins at the application frequency. Recommendation: The burn-in task group to discuss and provide guidance. When the SMD says that the part can be used at 200 MHz, then doing burn-in at 6 MHz (cited as burn-in equipment limitation frequency) is not going to be meaningful! d) Two Static Burn-ins Some manufacturers are doing electrical testing between the two static burn-ins, whereas others do electricals after completing both static burn-ins. Recommendation: Provide clarification in MIL-STD-883, Test Method 5004. e) Thermal Imaging For a device with hot spots, the thermal resistance, junction-to-case, would be much higher than the guidelines given in MIL-STD-1835. One of the suppliers used thermal imaging to find hot spots on the die. Recommendation: Assign a task group to evaluate the effectiveness of thermal imaging at the product development stage.

Class Y↗
DOE OSTI2022

Application of Constellation's best estimate alternate source term methodology

Safety analyses for a nuclear power plants need to consider postulated accidents that results in a risk of accidental release of radiation. The regulations require plant specific safety analysis reports to include an evaluation of the requirements of 10CFR50.67. Such a safety analysis report mandates limits such that calculated radiological consequences at certain locations do not exceed established limits in 10CFR50.67 following a postulated release of radioactivity. Analyses should demonstrate, with reasonable assurance, that these prescribed limits are complied with. Conventional methodologies utilize conservative approaches to address lack of uncertainty quantification in the utilized approaches, methods, and/or inputs. These built-in excess conservatisms often result in with compounding effects and hence overly conservative results in the estimated radiological consequences, which leads to inaccurate margin evaluation for operation and accident mitigation. Therefore, evaluating accurate dose consequences is needed for both operational and safety reasons. This paper illustrates the use of the best estimate source term (BEAST) methodology to the case of the loss of coolant accident (LOCA) dose analysis.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

Best practice reporting guideline for building stock energy models

Buildings are responsible for 38% of global greenhouse gas (GHG) emissions and, therefore, pathways to reduce their impact are crucial to achieve climate targets. Building stock energy models (BSEMs) have long been used as a tool to assess the current and future energy demand and environmental impact of building stocks. BSEMs have become more and more complex and are often tailored to case-specific datasets, which results in a high degree of heterogeneity among models. This heterogeneity, together with a lack of consistency in the reporting hinders the understanding of these models and, thereby, an accurate interpretation and comparison of results. In this paper we present a reporting guideline in order to improve reporting practices of BSEMs. The guideline was developed by experts as part of the IEA's Annex 70 and builds upon reporting guidelines from other fields. It consists of five topics (Overview, Model Components, Input and Output, Quality Assurance and Additional Information), which are further subdivided into subtopics. We explain which model aspects should be described in each subtopic, and provide illustrative examples on how to apply the guideline. In closing, the reporting guideline is consistent with the model classification framework and online model registry also developed in the Annex.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2024

Direct Feed High-Level Waste APPS Model Glass Testing (DFHLW APPS) Matrix

This report summarizes the data collected during the batching and melting of the Direct Feed High-Level Waste APPS Model Glass Matrix (DFHLW APPS) to serve as a quality-assured validation of the Aspen Process Performance Simulation (APPS) formulation method. Of 15 glasses tested, 12 satisfied all target property constraints. Two glasses, APPS-05 and -06, formed nepheline on canister centerline cooling heat-treatment and failed the Product Consistency Test response limits. Glass APPS-07-2 formed unacceptably high concentrations of crystals (primarily Na3Nd(PO4)2) when heat treated at 950 °C. All other glasses were found to be satisfactory. The measured property values were compared to predicted values from a set of current models. In many cases the current models were found to be inadequate for design of DFHLW glasses. These models are being adjusted to correct for mispredictions. Other models, e.g., density, toxicity characteristic leaching procedure, and sulfur solubility, are adequate for formulation of DFHLW glasses.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS2017

Strategic Employee Development in The Government Sector

As with many other U.S. agencies, succession planning is becoming a critical need for NASA. The primary drivers include (a) NASA's higher-than-average aged workforce with approximately 50% of employees eligible for retirement within 5 years; and (b) employees who need better developmental conversations to increase morale and retention. This problem is particularly concerning for Safety & Mission Assurance (S&MA) organizations since they traditionally rely on more experienced engineers and specialists to perform their organizations' functions. In response to this challenge, the Kennedy Space Center (KSC) S&MA organization created the Strategic Employee Development (SED) program. The SED program's goal is to provide a proactive method to counter the primary drivers by creating a deeper "bench strength" and providing a more comprehensive developmental feedback experience for the employee. The SED is a new succession planning framework that enables customization to any organization, and in this case, specifically for an S&MA organization. This is accomplished via the identification of key positions, the corresponding critical competencies, and a process to help managers have relevant and meaningful development conversations with the workforce. As a result of the SED, several tools and products were created that allows management to make better strategic workforce decisions. Although there are opportunities for improvement for the SED program, the most important impact has been on the quality of developmental discussions for employees.

Nguyen, Johnny↗
NASA NTRSDate not supplied

Shielding Considerations for CubeSat Structures During Solar Maximum

The purpose of this lessons learned is to communicate the utility of shielding in small spacecraft planning for the support of mission assurance and reliability. Numerous SmallSats have been flying in polar low earth orbit for scientific, communications, technology demonstrations, and imaging with academic, commercial, and government interests. Shielding has been part of mission assurance and reliability from the advent of long duration spacecraft missions. The Shields-1 CubeSat has been operating in polar low earth orbit since 16 December 2018 with atomic number (Z)-grade radiation shielding and demonstrates shielding effectiveness. Shields-1 has collected a representative example of solar minimum data in 2019 with 8 Teledyne dosimeters over varying shielding effectiveness. It serves as current experimental data and has been compared with NOVICE Shielding estimates using the AP8 –AE8 trapped radiation model with the Shields-1 CAD and generic CubeSat 3 unit (U) models. Using NOVICE model radiation analysis coding, the shielding effectiveness's, based on a generic CubeSat 3U structure with 4 electronic boards, were estimated for aluminum wall thicknesses ranging from 0.204 cmto4.44 cm (0.550 g/cm2–12.0 g/cm2) thick aluminum. For modeled polar orbiting spacecraft, solar maximum total ionizing dose (TID)increases by nearly a magnitude for thin-walled aluminum 0.550g/cm2-0.686 g/cm2(0.204 cm –0.254 cm) typical CubeSat structures. The shielding effectiveness by NOVICE Sigma estimates, which is a shielding sphere approximation around a detector, showed a linear relationship with wall thickness, which increased over the wall thickness by a ratio of 1.43 determined by linear regression analysis. Using NOVICE Adjoint Monte-Carlo Modeling of solar minimum and solar maximum with the inclusion of a worst-case solar particle event over a one year mission without geomagnetic shielding, the TID for minimum and maximum conditions for a generic 3U with a wall thickness of 0.254 cm is 158 RAD and 1540 RAD, respectively. The modeled total solar maximum TID is over estimated, because at low orbital latitudes a spacecraft will have shielding from Earth's magnetic field. However, TID will still be significant at high latitudes over the poles, where a spacecraft is exposed in a solar particle event. In contrast, to a thin walled generic 3U CubeSat, Shields-1 electronics enclosure has a shielding effectiveness of 21.3 g/cm2from NOVICE Sigma modeling and is expected to show reduced total ionizing dose increases during the present active Solar Cycle 25 period. Because solar particle events during solar maximum increase TID on electronic parts with thin-walled shielding in short periods of time, it is a mission assurance and reliability consideration on the spacecraft’s mission value versus adding shielding for risk reduction of premature spacecraft or instrument payload loss. Since the volumes of many instruments and system electronics have reduced with small spacecraft, shielding material costs and weight penalties have diminished. A small spacecraft project budget and schedule may limit traditional radiation-hardened part use and radiation testing requirements, where shielding can contribute to mission assurance and reliability with reduced costs.

Shields-1↗
DOE OSTI2023

SAM Software Quality Assurance Plan Implementation and NQA-1 Assessment

The System Analysis Module (SAM) is an advanced and modern system analysis tool being developed at Argonne National Laboratory under the U.S. DOE Office of Nuclear Energy’s Nuclear Energy Advanced Modeling and Simulation (NEAMS) program. As a modern-day software, SAM development included efforts to follow best practices in software development. These best practices include version control using git, independent reviews of development activities, and detailed descriptions of developments and bug fixes using the GitLab issue and merge request system. In Fiscal Year 2023 (FY23), the SAM development team set out to formalize a Software Quality Assurance (SQA) program that allowed industry partners to credit the informal steps being taken by the SAM development team to ensure the quality of the software. As part of formalizing an SQA program, a SQA Plan (SQAP) was developed, implemented, and assessed. The SAM SQAP targets compliance with NQA-1-2008/2009 Addenda. The SQAP builds on the MOOSE SQAP and the Argonne SSQAPP while accounting for the needs of the multi-organization SAM development team. Modifications to the SAM repository structure, including a new testing system, updated test cases, and the development of an internal website, facilitate the implementation of the SAM SQAP. The initial assessment of the SAM SQAP indicated that the SAM SQAP was adequately and effectively implemented and additional work was required to improve the compliance of the SAM SQAP with NQA-1 2008/2009 Addenda. Several improvements to the SQAP have already been drafted to address these assessments and future work is planned to further improve the SAM SQAP in support of end-user needs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1995

The Impact on Space Radiation Requirements and Effects on ASIMS

The evolution of highly miniaturized electronic and mechanical systems will be accompanied by new problems and issues regarding the radiation response of these systems in the space environment. In this paper we discuss some of the more prominent radiation problems brought about by miniaturization. For example, autonomous micro-spacecraft will require large amounts of high density memory, most likely in the form of stacked, multichip modules of DRAM's, that must tolerate the radiation environment. However, advanced DRAM's (16 to 256 Mbit) are quite susceptible to radiation, particularly single event effects, and even exhibit new radiation phenomena that were not a problem for older, less dense memory chips. Another important trend in micro-spacecraft electronics is toward the use of low-voltage microelectronic systems that consume less power. However, the reduction in operating voltage also caries with it an increased susceptibility to radiation. In the case of application specific integrated microcircuits (ASIM's), advanced devices of this type, such as high density field programmable gate arrays (FPGA's) exhibit new single event effects (SEE), such as single particle reprogramming of anti-fuse links. New advanced bipolar circuits have been shown recently to degrade more rapidly in the low dose rate space environment than in the typical laboratory total dose radiation test used to qualify such devices. Thus total dose testing of these parts is no longer an appropriately conservative measure to be used for hardness assurance. We also note that the functionality of micromechanical Si-based devices may be altered due to the radiation-induced deposition of charge in the oxide passivation layers.

Barnes, C.↗
NASA NTRS1987

Filter distortion effects on telemetry signal-to-noise ratio

The effect of filtering on the Signal-to-Noise Ratio (SNR) of a coherently demodulated band-limited signal is determined in the presence of worse-case amplitude ripple. The problem is formulated mathematically as an optimization problem in the L2-Hilbert space. The form of the worst-cast amplitude ripple is specified, and the degradation in the SNR is derived in a closed form expression. It is shown that when the maximum passband amplitude ripple is 2 delta (peak to peak), the SNR is degraded by at most (1 - delta squared), even when the ripple is unknown or uncompensated. For example, an SNR loss of less than 0.01 dB due to amplitude ripple can be assured by keeping the amplitude ripple to under 0.42 dB.

Sadr, R.↗
NASA NTRS2010

Separation of Lift-Generated Vortex Wakes Into Two Diverging Parts

As part of an ongoing study of the spreading rate of lift-generated vortex wakes, the present investigation considers possible reasons as to why segments of lift-generated wakes sometimes depart from the main part of the wake to move rapidly in either an upward or downward direction. It is assumed that deficiencies or enhancements of the lift carry over across the fuselage-shrouded wing are the driving mechanism for departures of wake-segments. The computations presented first indicate that upwardly departing wake segments that were observed and photographed could have been produced by a deficiency in lift carryover across the fuselage-shrouded part of the wing. Computations made of idealized vortex wakes indicate that upward departure of a wake segment requires a centerline reduction in the span loading of 70% or more, whether the engines are at idle or robust thrust. Similarly, it was found that downward departure of wake segments is produced when the lift over the center part of the wing is enhanced. However, it was also found that downward departures do not occur without the presence of robust engine-exhaust streams (i.e., engines must NOT be at idle). In those cases, downward departures of a wake segment occurs when the centerline value of the loading is enhanced by any amount between about 10% to 100%. Observations of condensation trails indicate that downward departure of wake segments is rare. Upward departures of wake segments appears to be more common but still rare. A study to determine the part of the aircraft that causes wake departures has not been carried out. However, even though departures of wake segments rarely occur, some aircraft do regularly shed these wake structures. If aircraft safety is to be assured to a high degree of reliability, and a solution for eliminating them is not implemented, existing guidelines for the avoidance of vortex wakes [1,3] may need to be broadened to include possible increases in wake sizes caused by vertical departures of wake segments. Further study may indicate that it is not possible to modify existing aircraft enough to prevent wake departures. Wake-avoidance guidelines must then be adjusted to provide the desired degree of safety. It appears that steps to avoid upwardly moving wake segments have already been incorporated into the avoidance procedures used for aircraft on approach to runways at the Frankfurt Airport [6,7]. The uncertainty in the prospects for compromises in flight safety caused by rapidly upwardly or downwardly moving wake segments suggest that it be specified that aircraft do not fly above or below each other during operations in the airport vicinity where aircraft are likely to be closely spaced [20].

Rossow, Vernon J.↗
NASA NTRSDate not supplied

Shielding Considerations for CubeSat Structures During Solar Maximum

The purpose of this lessons learned paper is to communicate the utility of shielding in small spacecraft planning for the support of mission assurance and reliability. Numerous SmallSats have been flying in polar low Earth orbit for science, communications, technology demonstrations, and imaging with academic, commercial, and government interests. Shielding has been part of mission assurance and reliability from the advent of long duration spacecraft missions. The Shields-1 CubeSat has been operating in polar low Earth orbit since 16 December 2018 with atomic number (Z)-grade radiation shielding and demonstrates shielding effectiveness. Shields-1 has collected a representative example of solar minimum data in 2019 with eight Teledyne µDosimeters over varying shielding effectivenesses. It serves as current experimental data and has been compared with NOVICE Shielding estimates using the AP8 – AE8 trapped radiation model with the Shields-1 CAD and generic CubeSat three unit (3U) models. Using NOVICE model radiation analysis coding, the shielding effectivenesses, based on a generic CubeSat 3U structure with four electronic boards, were estimated for aluminum wall thicknesses ranging from 0.204 cm to 4.44 cm (0.550 g/cm 2 to 12.0 g/cm 2 ). For modeled polar orbiting spacecraft, solar maximum total ionizing dose (TID) increases by nearly a magnitude for thin-walled aluminum 0.550-g/cm 2 - 0.686-g/cm 2 (0.204-cm – 0.254-cm) typical CubeSat structures. The shielding effectiveness estimated by NOVICE Sigma, which is a shielding sphere approximation around a detector, showed a linear relationship with wall thickness, which increased over the wall thickness by a ratio of 1.43 determined by linear regression analysis. Using NOVICE Adjoint Monte-Carlo Modeling of solar minimum and solar maximum with the inclusion of a worst-case solar particle event over a one-year mission without geomagnetic shielding, the TID for minimum and maximum conditions for a generic 3U with a wall thickness of 0.254 cm is 158 RAD and 1540 RAD, respectively. The modeled total solar maximum TID is over estimated, because at low orbital latitudes a spacecraft will have shielding from the Earth’s magnetic field. However, TID will still be significant at high latitudes over the poles, where a spacecraft is exposed in a solar particle event. In contrast to a thin-walled generic 3U CubeSat, the Shields-1 electronics enclosure has a shielding effectiveness of 21.3 g/cm 2 from NOVICE Sigma modeling and is expected to show reduced total ionizing dose increases during the present active Solar Cycle 25 period. Because solar particle events during solar maximum increase TID on electronic parts with thin-walled shielding in short periods of time, it is a mission assurance and reliability consideration on the mission value of the spacecraft versus adding shielding for risk reduction of premature spacecraft or instrument payload loss. Since the volumes of many instruments and system electronics have reduced with small spacecraft, shielding material costs and weight penalties have diminished. A small spacecraft project budget and schedule may limit traditional radiation-hardened part use and radiation testing requirements, where shielding can contribute to mission assurance and reliability with reduced costs.

Shields-1↗
NASA NTRS1997

Structural Design and Analysis of a Light-Weight Laminated Composite Heat Sink for Spaceflight PWBs

In order to reduce the overall weight in spaceborne electronic systems, a conventional metallic heat sink typically used for double-sided printed wiring boards was suggested to be replaced by light-weight and high-strength laminated composite materials. Through technology validation assurance (TVA) approach, it has been successfully demonstrated that using laminated composite heat sink can not only reduce the weight of the heat sink by nearly 50%, but also significantly lower the internal thermally-induced stresses that are largely responsible for potential delamination under cyclic temperature variations. With composite heat sink, both thermal and dynamic performance of the double-sided printed wiring board (PWB) exceeds that of its counterpart with metallic heat sink. Also included in this work is the original contribution to the understanding of creep behavior of the worst-case leadless chip carrier (LCC) surface mount solder joint. This was identified as the interconnection most susceptible to thermal fatigue damage in the PWB assembly.

Fan, Mark S.↗
NASA NTRS1981

Planning for performance augmentation for the Space Shuttle

The necessity of performance augmentation for the Space Shuttle to assure its capability of delivering a 32,000 pound payload to a 150 nautical mile circular orbit at an inclination of 98 deg and to then retrieve a 25,000 pound spacecraft from that orbit is discussed. The performance augmented Space Shuttle must meet all design mission requirements and will offer potential payload growth to accommodate new payloads and new concepts. The performance augmentation program includes the uprating of the Space Shuttle main engines to the range of 115% of rated power level for nominal operations, the development of solid rocket motor filament-wound case segments, and the use of a liquid boost module.

Goldsby, W. D.↗
NASA NTRS2022

Assurance of Electronic Parts for Aerospace System Reliability: Past, Present, and Future

Over the last two to three decades, the balance of influence within the electronics industry has shifted decisively towards the consumer electronics and information technology products, away from the defense or aerospace markets. This shift towards the commercial markets has changed certain ground rules in the electronics industry. Reliance of the aerospace industry, in particular, on components from supply chains dedicated to other products, or cross-vertical product integration, creates a supply web and introduces significant risks that are not necessarily present for volume-driven electronic products. Many of the unique risks in the aerospace industry emanate from the key characteristics of this industry. Although selection and usage of commercial electronics in NASA flight hardware is possible at a comparable (and in many cases lower) level of risk to that of employing parts that are screened to military or NASA specifications, for a large majority of flight projects it is difficult to distinguish the difference in on-orbit performance or reliability for parts screened at any level, or commercial parts that have no additional screening performed by the government. This paper identifies several bases for establishing context and developing unique or alternative approaches for successful parts selection and application within NASA and across the commercial space community.

electronic parts↗
NASA NTRS2000

Structuring Formal Control Systems Specifications for Reuse: Surviving Hardware Changes

Formal capture and analysis of the required behavior of control systems have many advantages. For instance, it encourages rigorous requirements analysis, the required behavior is unambiguously defined, and we can assure that various safety properties are satisfied. Formal modeling is, however, a costly and time consuming process and if one could reuse the formal models over a family of products, significant cost savings would be realized. In an ongoing project we are investigating how to structure state-based models to achieve a high level of reusability within product families. In this paper we discuss a high-level structure of requirements models that achieves reusability of the desired control behavior across varying hardware platforms in a product family. The structuring approach is demonstrated through a case study in the mobile robotics domain where the desired robot behavior is reused on two diverse platforms-one commercial mobile platform and one build in-house. We use our language RSML (-e) to capture the control behavior for reuse and our tool NIMBUS to demonstrate how the formal specification can be validated and used as a prototype on the two platforms.

Thompson, Jeffrey M.↗
DOE OSTI2022

Application of Orthogonal Defect Classification for Software Reliability Analysis

The modernization of existing and new nuclear power plants with digital instrumentation and control systems (DI&C) is a recent and highly trending topic. However, there lacks strong consensus on best-estimate reliability methodologies by both the United States (U.S.) Nuclear Regulatory Commission (NRC) and the industry. This has resulted in hesitation for further modernization projects until a more unified methodology is realized. In this work, we develop an approach called Orthogonal-defect Classification for Assessing Software Reliability (ORCAS) to quantify probabilities of various software failure modes in a DI&C system. The method utilizes accepted industry methodologies for software quality assurance that are also verified by experimental or mathematical formulations. In essence, the approach combines a semantic failure classification model with a reliability growth model to predict (and quantify) the potential failure modes of a DI&C software system. The semantic classification model is used to address the question: How do latent defects in software contribute to different software failure root causes? The use of reliability growth models is then used to address the question: Given the connection between latent defects and software failure root causes, how can we quantify the reliability of the software? A case study was conducted on a representative I&C platform (ChibiOS) running a smart sensor acquisition software developed by Virginia Commonwealth University (VCU). The testing and evidence collection guidance in ORCAS was applied, and defects were uncovered in the software. Qualitative evidence, such as condition coverage, was used to gauge the completeness and trustworthiness of the assessment while quantitative evidence was used to determine the software failure probabilities. The reliability of the software was then estimated and compared to existing operational data of the sensor device. It is demonstrated that by using ORCAS, a semantic reasoning framework can be developed to justify if the software is reliable (or unreliable) while still leveraging the strength of the existing methods.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

Application of Orthogonal Defect Classification for Software Reliability Analysis

The modernization of existing and new nuclear power plants with digital instrumentation and control systems (DI&C) is a recent and highly trending topic. However, there lacks strong consensus on best-estimate reliability methodologies by both the United States (U.S.) Nuclear Regulatory Commission (NRC) and the industry. This has resulted in hesitation for further modernization projects until a more unified methodology is realized. In this work, we develop an approach called Orthogonal-defect Classification for Assessing Software Reliability (ORCAS) to quantify probabilities of various software failure modes in a DI&C system. The method utilizes accepted industry methodologies for software quality assurance that are also verified by experimental or mathematical formulations. In essence, the approach combines a semantic failure classification model with a reliability growth model to predict (and quantify) the potential failure modes of a DI&C software system. The semantic classification model is used to address the question: How do latent defects in software contribute to different software failure root causes? The use of reliability growth models is then used to address the question: Given the connection between latent defects and software failure root causes, how can we quantify the reliability of the software? A case study was conducted on a representative I&C platform (ChibiOS) running a smart sensor acquisition software developed by Virginia Commonwealth University (VCU). The testing and evidence collection guidance in ORCAS was applied, and defects were uncovered in the software. Qualitative evidence, such as condition coverage, was used to gauge the completeness and trustworthiness of the assessment while quantitative evidence was used to determine the software failure probabilities. The reliability of the software was then estimated and compared to existing operational data of the sensor device. It is demonstrated that by using ORCAS, a semantic reasoning framework can be developed to justify software reliability (or unreliability) while still leveraging the strength of the existing methods.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

Integrated Issues and Risk Management: A Theoretical Framework Overview

The contractor requirements document for DOE O 226.1B, Implementation of Department of Energy Oversight Policy, requires DOE/NNSA contractors to establish an assurance system that includes, among other things, “Rigorous, risk-informed, and credible self-assessment and feedback and improvement activities. Assessment programs must be risk-informed, formally described and documented, and appropriately cover potentially high consequence activities” and “Contains an issues management process that is capable of categorizing the significance of findings based on risk and priority and other appropriate factors….” However, the term “risk-informed” is not defined in this or any other DOE order, and no formal guidance on how to integrate the two concepts currently exists. The Risk Management Guide for Defense Programs released by NA-18, Office of Systems Engineering and Integration (SE&I), states it is “a framework and general guidance to program office personnel on the effective management of program risks and issues”, however it then defines issues as “events with 100% likelihood of affecting program objectives” and states “unless specified otherwise, the term “risk” will also serve to represent issues for the remainder of this plan,” severally limiting its ability to provide adequate guidance on this topic. Outside of DOE scope, the U.S. Nuclear Regulatory Commission (U.S. NRC) imposes similar requirements. ASME NQA-1-2015 Requirement 16 states “Conditions adverse to quality shall be identified promptly and corrected as soon as practicable. In the case of a significant condition adverse to quality, the cause of the condition shall be determined, and corrective action taken to preclude recurrence. The identification, cause, and corrective action for significant conditions adverse to quality shall be documented and reported to appropriate levels of management. Completion of corrective actions shall be verified”. The purpose of this document is to provide a best-in-class framework for an integrated risk and issues management process. This process would provide a robust feedback loop between risk management and issues management to: Enhance risk identification and characterization, use risk handling principles to improve corrective action planning, and ensure regulatory compliance.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗