SEARCH · Search NASA

Results for “Operational Risk”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

All sources NASA NTRS DOE OSTI

DOE OSTI2025

Adapting Traditional Hazards Analysis Methods to Address Cyber Risks

Traditional hazards analysis (HA) methods, originally developed to address physical and operational risks, often fall short when it comes to identifying and mitigating cyber threats. These cyber threats pose unique and evolving risks to critical infrastructure and industrial control systems (ICS). This report explores the integration of Cyber-Informed Engineering (CIE) principles into existing HA methods to enhance their ability to address cyber-induced risks. CIE provides organizations with a practical, cost-effective approach to closing the gap between traditional HA methods and the need for cyber risk mitigation. By leveraging existing safety processes and controls, CIE allows users to examine and mitigate cyber vulnerabilities without overhauling existing HA methods. This report identifies areas where HA and CIE naturally align and where their approaches diverge. It emphasizes how CIE principles can be used to adapt HA methods, broadening their scope to include cyber risks and enabling the mitigation of cyber- induced impacts alongside traditional hazards and failure scenarios. This report examines how CIE can be applied across various HA methods—such as Hazard and Operability Studies (HAZOP), Probabilistic Risk Assessment (PRA), Failure Modes and Effects Analysis (FMEA), Systems-Theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), and Layers of Protection Analysis (LOPA). It provides strategies for integrating CIE to strengthen the identification, assessment, and mitigation of cyber-induced risks. The findings offer a structured entry point for organizations to embed CIE concepts into hazards and safety analyses, as well as broader engineering processes, ultimately supporting the design and operation of a more resilient infrastructure.

42 - ENGINEERING↗

NASA NTRSDate not supplied

Development of Space Mission Integrated Operations Scenarios

Integrated Operations Scenarios (IOS) describe nominal operations planned for a space mission. Operational scenarios are key to an operations concept, as they help identify issues and drivers on the operations system. This paper covers the tools, processes, and inputs that feed into an IOS product, and how IOS iterations during a mission lifecycle can buy down operational risks. A case used for this paper is nominal operations for an initial crewed Artemis mission that includes cross-program sequence of tasks required to accomplish end to end functions from launch through transit, on-orbit operations, to safely return to Earth. An IOS product serves as a reference for discussions during requirements development, task and risk analyses, concept of operations development, and as foundation to prepare space mission flight plans.

integrated operations scenarios↗

DOE OSTI2025

A real-time distributed solid oxide electrolysis cell (SOEC) model for cyber-physical simulation

System integration and dynamic operability between SOEC and balance-of-plant (BoP) components are major technical challenges before realizing rapid load following of SOEC systems. Cyber-physical simulation (CPS) is a leading-edge digital engineering approach and is regarded as the next step beyond Digital Twins. CPS approach can be used to research SOEC system integration and develop dynamic controls prior to actual pilot testing without using a real SOEC. To seamlessly couple with BoP hardware and access non-observable operational parameters (e.g., local temperature gradient) during transients, a distributed one-dimensional (1D) real-time SOEC model was developed. Its real-time execution was demonstrated for 20 to 640 nodes at the fixed time step of 5 ms. A higher excess air ratio enabled smaller local temperature gradients on SOEC solid materials and faster transients upon current density step change from 0.15 to 0.55 A cm -2 . During the transients, the magnitude of the peak temperature gradient nearly doubled in 10 s from -3.5 to -5.9 °C cm -1 . This represents a significant operating risk that can impact the dynamic operability of SOEC systems. In addition, the local temperature gradient was found to change directions on all nodes in SOEC solid materials, with the greatest impact on the upstream nodes. The SOEC model was also tested at the thermal neutral voltage using actual process air flow parameters as variable model inputs. Variable process air temperatures were found to induce alternating local temperature gradients on SOEC solid materials. These are new operational mechanisms for SOEC degradation relevant for load following operational modes yet distinct from previous reports. To mitigate these unfavorable features, the SOEC can be operated at voltages that are slightly (±20 mV) deviated from the thermal neutral voltage. Here, the corresponding net thermal energy change was less than 1.6% of the electric power consumption. This 1D real-time SOEC model established the basis of cyber-physical simulation of SOEC hybrid systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS1983

The measurement of operator workload in the Mark IVA DSCC monitor and control subsystem

An operator workload measurement methodology is presented which will be used in support of the Mark IVA operational test and evaluation plan. Three operator workload measures are suggested: operator ratings, primary task work measures, and information processing time measures. A method of validating the workload measures using secondary task work measures is presented. It is expected that operations testing using these measures will assist in establishing the time required to perform essential operational activities and will indicate high risk operations areas due to potential operator overload.

Lemay, M.↗

NASA NTRS2021

Positive Train Control (PTC) Study: An Analysis of PTC-Related Reports Submitted to the Confidential Close Call Reporting System (C3RS)

A supplemental analysis of reports submitted to the voluntary Confidential Close Call Reporting System (C3RS) was conducted to identify the potential operational risks associated with the integration and operation of Positive Train Control (PTC) systems. This study identified four areas that may merit further investigation by FRA and rail carriers: System/Paperwork synchronization, training, PTC acceptance, and alerting mechanisms.

C3RS↗

NASA NTRS2013

Approach and Entry, Descent, and Landing Operations for the Mars Science Laboratory Mission

On August 5th, 2012, at 10:31 PM PDT, the Mars Science Laboratory (MSL) rover Curiosity landed safely within Gale Crater. Her successful landing de-pended not only upon the flawless execution of the numerous critical activities during the seven minute entry, descent, and landing (EDL), but also upon the operational preparations and decisions made by the flight team during approach, the final weeks, days, and hours prior to landing. During this period, decisions made by the flight team balanced operational risk to the spacecraft in flight with any resulting risks incurred during EDL as a result of those decisions. This pa-per summarizes the operations plans made in preparation for Approach and EDL and the as flown decisions and actions executed that balanced the operational and EDL risks and prepared the vehicle for a successful landing.

Mars Science Laboratory (MSL)↗

NASA NTRS2018

Annex H - SORA & UTM

This is a briefing to provide an overview of the contents of the Annex H of the Specific Operation Risk Assessment (SORA) document. This annex focuses on the application of UTM to SORA methodology.

UTM (Unmanned Aviation Systems)↗

DOE OSTI2021

Next Generation Logistics Systems for Delivering Optimal Biomass Feedstocks to Biorefining Industries in the Southeastern U.S.

The diverse portfolio of biomass sources that is available in the Southeastern U.S., including a significant supply of pine “residue”, represents a valuable strategic position for the region. Through blends formulated based on critical properties, this project will take full advantage of the range in biomass properties afforded by the portfolio to produce a consistent, high-performance feedstock for the industry, while lowering cost. Key developments being targeted to enable this potential include whole-tree transport to a state-of-the-art merchandising depot that will further access biomass from ongoing, forest industry operations. The approach will more effectively utilize the tree and distribute cost, while minimizing in-woods contamination of the woody biomass component. To implement this vision, information on the chemical composition and changes that are induced during multiple preprocessing steps (size reduction, moisture removal, densification, etc.) is needed. New NIR sensor technology will be developed for online monitoring of important biomass properties. The data will be incorporated into a statistical process control platform to improve process efficiency and meet required specifications. Advanced process models are being developed to inform the techno-economic and life-cycle assessment of the program’s impact. The new system will ultimately reduce operational risks from supply chain disruptions, and allow operation of larger-scale biorefineries.

09 BIOMASS FUELS↗

NASA NTRS2008

Career Excess Mortality Risk from Diagnostic Radiological Exams Required for Crewmembers Participating in Long Duration Space Flight

NASA requires astronauts to undergo diagnostic x-ray examinations as a condition for their employment. The purpose of these procedures is to assess the astronaut s overall health and to diagnose conditions that could jeopardize the success of long duration space missions. These include exams for acceptance into the astronaut corps, routine periodic exams, as well as evaluations taken pre and post missions. Issues: According to NASA policy these medical examinations are considered occupational radiological exposures, and thus, are included when computing the astronaut s overall radiation dose and associated excess cancer mortality risk. As such, astronauts and administrators are concerned about the amount of radiation received from these procedures due to the possibility that these additional doses may cause astronauts to exceed NASA s administrative limits, thus disqualifying them from future flights. Methods: Radiation doses and cancer mortality risks following required medical radiation exposures are presented herein for representative male and female astronaut careers. Calculation of the excess cancer mortality risk was performed by adapting NASA s operational risk assessment model. Averages for astronaut height, weight, number of space missions and age at selection into the astronaut corps were used as inputs to the NASA risk model. Conclusion: The results show that the level of excess cancer mortality imposed by all required medical procedures over an entire astronaut s career is approximately the same as that resulting from a single short duration space flight (i.e. space shuttle mission). In short the summation of all medical procedures involving ionizing radiation should have no impact on the number of missions an astronaut can fly over their career. Learning Objectives: 1. The types of diagnostic medical exams which astronauts are subjected to will be presented. 2. The level of radiation dose and excess mortality risk to the average male and female astronaut will be presented.

Dodge, C. W.↗

NASA NTRS2011

Lessons Learned for Planning and Estimating Operations Support Requirements

Operations (phase E) costs are typically small compared to the spacecraft development and test costs. This, combined with the long lead time for realizing operations costs, can lead projects to focus on hardware development schedules and costs, de-emphasizing estimation of operations support requirements during proposal, early design, and replan cost exercises. The Discovery and New Frontiers (D&NF) programs comprise small, cost-capped missions supporting scientific exploration of the solar system. Even moderate yearly underestimates of the operations costs can present significant LCC impacts for deep space missions with long operational durations, and any LCC growth can directly impact the programs ability to fund new missions. The D&NF Program Office at Marshall Space Flight Center recently studied cost overruns for 7 D&NF missions related to phase C/D development of operational capabilities and phase E mission operations. The goal was to identify the underlying causes for the overruns and develop practical mitigations to assist the D&NF projects in identifying potential operations risks and controlling the associated impacts to operations development and execution costs. The study found that the drivers behind these overruns include overly optimistic assumptions regarding the savings resulting from the use of heritage technology, late development of operations requirements, inadequate planning for sustaining engineering and the special requirements of long duration missions (e.g., knowledge retention and hardware/software refresh), and delayed completion of ground system development work. This presentation summarizes the study and the results, providing a set of lessons NASA can use to improve early estimation and validation of operations costs.

Newhouse, Marilyn↗

NASA NTRSDate not supplied

The Effects of Arcing Ejecta on Space Suit Materials from ISS RPCM Hot Mate/Demate During EVA

Onboard ISS, taking systems off-line when powering down to perform servicing on Remote Power Control Modules (RPCMs) introduces operational risk. An investigation lead by the NASA Engineering and Safety Center (NESC) was performed by a multi-center team to assess the safety of performing on-orbit replacement of RPCMs without powering down. This investigation revealed the potential for molten metal particulate generation in the event of an arcing occurrence. As RPCM replacement can be performed outside ISS during an Extra Vehicular Activity (EVA), it is necessary to assess the effects of this molten metal ejecta contact with the Extravehicular Mobility Unit (EMU) Space Suit Assembly (SSA) during an arcing event. A test was devised to mimic arcing ejecta contact with samples representing various SSA cross-sections. Four areas of the SSA were chosen for test to represent the majority of the SSA cross-sections. Testing was conducted by the University of California, Riverside that generated the molten metal particles, included varying composition, size and temperature, and dropped them onto the surface of the various SSA cross-sections. Exposed SSA materials were then evaluated for degree of damage, penetration, and thermal conductance through the cross-section by ILC Dover. Results showed that the SSA Glove is most susceptible to damage from arcing events. This data will be used to make risk management decisions for future RPCM servicing operations. This testing also demonstrated the durability of the SSA design and materials to exposure to extreme environments

Linda S Hewes↗

NASA NTRSDate not supplied

The Effects of Arcing Ejecta on Space Suit Materials from ISS RPCM Hot Mate/Demate During EVA

Linda S. Hewes↗

NASA NTRSDate not supplied

Textual and Network Analysis of Part 107 Waivers

Context: The management of hazards in sUAS operations is not as well defined as today's commercial operations despite sUAS widespread use. Part 107 waived operations' provisions, which manage hazards for higher risk operations that require approval, can offer insight to organizations establishing UAS Programs in managing their own operation hazards. Aim: We seek to understand how the FAA Part 107 waived operations manage hazards. Method: We used the constant comparative method to identify hazard mitigation textual categories from provisions and use networks to assess the dispersion of provisions and the identified categories across issued waivers. Results: Eight mitigation categories and twenty-four sub-categories were identified. Most provisions present in waivers are mostly reused in one waiver. Conclusion: While there is a broad range of provisions to control for hazard mitigations in the Part 107 issued waivers analyzed regulations, they require case-by-case modifications.

Urban Air Mobility↗

NASA NTRSDate not supplied

Textual and Network Analysis of Title 14 CFR Part107 Waivers

Context: The management of hazards in small unmanned aircraft systems (sUAS) operations is not as well defined as today's commercial operations despite sUAS widespread use. FAA Title 14 Code of Federal Regulations (CFR) Part 107 waived operations' provisions, which manage hazards for higher risk operations that require approval, can offer insight to organizations establishing UAS Programs in managing their own operation hazards. Aim: We seek to understand how the Title 14 CFR Part 107 waived operations manage hazards. Method: We used the constant comparative method to identify hazard mitigation textual categories from provisions and use networks to assess the dispersion of provisions and the identified categories across issued waivers. Results: Eight mitigation categories and twenty-four sub-categories were identified. Most provisions present in waivers are mostly reused in one waiver. Conclusion: While there is a broad range of provisions to control for hazard mitigations in the Title 14 CFR Part 107 issued waivers analyzed regulations, they require case-by-case modifications.

Urban Air Mobility↗

NASA NTRSDate not supplied

Design and Testing of an Approach to Automated In-Flight Safety Risk Management for sUAS Operations

An onboard risk management automation design is presented based on run-time assurance principles, as well as the concept for In-Time Aviation Safety Management Systems (IASMS) as described by the National Academies. The automation is designed to operate independently of the autopilot and perform real-time risk assessment spanning multiple classes of hazards, predict constraint violations, and track autopilot states. In the event of elevated risk conditions or predicted constraint violations, the automation will select from a set of available contingencies and trigger autopilot mode changes if necessary to mitigate risk exposure. The onboard automation also informs the remote operator/pilot of what the independent monitor is observing and any contingency decisions or actions that may arise during flight. Details of an implementation of this design and results of verification and validation activities, as required to meet stringent NASA software and system assurance standards, are also presented. This includes simulation and flight testing using small unmanned aircraft systems.

Ersin Ancel↗

DOE OSTI2024

Application of quantitative risk assessment to address stakeholder questions in geologic carbon storage

Ambitious international greenhouse gas emissions reduction targets demand a rapid transformation to a low-carbon economy. This transformation includes the accelerated adoption of carbon dioxide (CO2) capture and storage (CCS) technology. However, as with any large-scale engineering enterprise, the widespread commercial-scale deployment of geologic carbon storage (GCS) raises important questions about technology and cost-effectiveness, safety, environmental risk, and long-term liability. Effectively assessing and managing risks and liability associated with GCS projects is a key technical need throughout the project life cycle-from site selection and permitting to monitoring design, operational risk management, and post-operational site closure. This presentation highlights recent advancements in tools for quantitative risk assessment, being developed by the National Risk Assessment Partnership (NRAP). NRAP is a multi-year, multinational laboratory research collaboration sponsored by the U.S. Department of Energy's Office of Fossil Energy and Carbon Management. Our focus will be on these tools' applications in addressing critical stakeholder questions related to supporting permitting to ensure secure and environmentally protective storage; designing effective and efficient monitoring plans; evaluating the effectiveness of remedial actions and risk management alternatives; and informing liability assessment and investment decisions. This paper will detail the key functionality of NRAP’s Open-Source Integrated Assessment Model (NRAP-Open-IAM), a computational framework for assessing leakage risk and containment assurance. This model features streamlined workflows for calculating leakage risk profiles, delineating risk-based area of review, and assessing contingency plans and post-injection site care requirements. ORION is an open-source, observation-based ensemble forecasting toolkit to help operators assess the seismic hazard at a carbon storage site. The State of Stress Analysis Tool (SOSAT), designed to assess subsurface stress conditions and evaluate geomechanical risk resulting from CO2 injection in an area of interest will also be presented. We will also introduce a prototype model to evaluate storage project costs and liability associated with risk management. The Technoeconomic and Liability Evaluation for Storage (TALES) model uses results from forecasts of leakage and induced seismicity risk to estimate the lifecycle cost of managing risk. Finally, a preliminary example of how the NRAP Risk-based Adaptive Monitoring Plan (RAMP) tool can be used to design efficient and effective site monitoring plans and estimate the detectability of fluid leakage will be provided. The relevance of these tools for addressing key stakeholder questions amidst uncertainty will be emphasized.

decision support↗

NASA NTRS1989

Risk analysis of space transportation during the space station era

This study addresses the operational risks of manned space transportation during the era of space station deployment along with alternative launch vehicle architectures to reduce the risks. Vehicle architectures considered included shuttle only, an additional unmanned launch vehicle, and a second manned/unmanned launch vehicle. Projections are made for the operational parameters and flight event probabilities. Using these projections and Space Station era mission models, the operability of alternative vehicle architectures are examined, and implications to future manned space program plans are summarized.

Source record↗

NASA NTRS2000

Summary of Results from the Risk Management Program for the Mars Microrover Flight Experiment

On 4 July 1997, the Mars Pathfinder landed on the surface of Mars carrying the first planetary rover, known as the Sojourner. Formally known as the Microrover Flight Experiment (MFEX), the Sojourner was a low cost, high-risk technology demonstration, in which new risk management techniques were tried. This paper summarizes the activities and results of the effort to conduct a low-cost, yet meaningful risk management program for the MFEX. The specific activities focused on cost, performance, schedule, and operations risks. Just as the systems engineering process was iterative and produced successive refinements of requirements, designs, etc., so was the risk management process. Qualitative risk assessments were performed first to gain some insights for refining the microrover design and operations concept. These then evolved into more quantitative analyses. Risk management lessons from the manager's perspective is presented for other low-cost, high-risk space missions.

Shishko, Robert↗