Search NASA⌕ Search

SEARCH · Search NASA

Results for “INFORMATION ASSURANCE”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Time Dependence of Methane Generation Rates from Saltstone

This report documents the tests performed to address the requirements listed in the Technical Request, which resulted in a Task Technical & Quality Assurance Plan (TTQAP) and a Run Plan to obtain the required information. The research expands previous scoping work to better understand methane generation in the Saltstone Disposal Facility (SDF). That scoping work demonstrated that methane is produced when sulfide-containing material is added to methylmercury (MeHg), which is found in the SDF Tank 50 feed waste. When Tank 50 waste is combined with grout premix solids dry feed ingredients of cement, slag cement, and fly ash, sulfides are released from the slag cement component of the premix. The prior testing results showed that while the concentration of total mercury was not affected in the pH 14 waste, the MeHg likely reacted with the sulfide contained in the slag. The scoping tests were performed in sealed reactors and thus, methane generation was not measured continuously; rather, it was measured after one hour and after 24 hours. After 24 hours, a large percentage of the MeHg was converted to methane, but after 1 hour only a small percentage of methane was released. It is noteworthy that the methane generation rate (MGR) was greater at the one-hour measurement. The data compiled from the scoping work needed to be expanded to better understand the generation of methane released from grout mixed with Tank 50 waste. This expanded study developed a more extensive knowledge of how and when methane is generated to inform the Documented Safety Analysis (DSA) of the SDF. As such, employing 8 sealed reactors, the methane generation time periods were extended to 2, 4, 6, 18, 30, 48, 72, and 96 hours (4 days). Results are documented herein to determine the capacity for MeHg, contained within Tank 50 salt solution (T50SS) simulant, to produce methane when mixed with saltstone dry feed ingredients, i.e., individual components (cement, slag, and fly ash) or a combination of those components.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Function-based Taxonomy Implementation

Function-based taxonomies are relational mapping tools used to clearly illustrate how an organization delivers Critical Functions by using various people, processes, technologies, information, and infrastructure (PPTII). Critical Functions are the actions or activities that make up the organization’s primary purpose. Enabling Functions are the combination of PPTII used by the organization to deliver their Critical Functions. A function-based taxonomy provides a framework to categorize information and related artifacts that document an organization’s unique implementation of PPTII for Critical Function delivery. The ideal state of a function-based taxonomy is to organize the existing knowledge the organization already has throughout their numerous systems, policies, people, procedures, and configurations. A well-organized taxonomy helps organizations to effectively leverage their knowledge by clearly identifying dependencies and connections. This document is the result of combined engineering and analytical experience and describes a repeatable method for producing function-based taxonomies.

42 ENGINEERING↗

An Integrated Framework for Risk Assessment of High Safety Significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology and Demonstration

This report documents the activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2022 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective and secure DI&C technologies for digital upgrades/designs. A framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the risk impact of plant modernization, considering the introduction of high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals, the framework provides a means to address relevant technical issues by: (1) defining a risk-informed analysis process for DI&C upgrade, that integrates hazard analysis, reliability analysis, and consequence analysis, (2) applying risk-informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development and deployment of advanced DI&C technologies on nuclear power plant (NPPs).

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

An Integrated Framework for Risk Assessment of Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology Refinement and Exploration

This report documents activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2023 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective, and secure DI&C technologies for digital upgrades/designs. A risk assessment-informed framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk informed capability to quantitatively estimate the safety margin obtained from plant modernization, especially for safety-related DI&C systems, (2) support and supplement existing risk informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of safety-related DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals, the LWRS-developed framework provides a means to address relevant technical issues by: (1) defining a risk informed analysis process for DI&C upgrade that integrates hazard analysis, reliability analysis, and consequence analysis, (2) applying risk informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development and deployment of advanced DI&C technologies in nuclear power plants (NPPs). Adding diversity within a system or components is the primary means to eliminate and mitigate CCFs, but diversity also increases system complexity and may not address all sources of systematic failures. Optimization of diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in safety-related DI&C systems of NPPs and supporting relevant design optimization, the proposed framework provides: (a) A best-estimate, risk informed capability to address new technical digital issues quantitatively, focusing on software CCFs in safety-related DI&C systems of NPPs; (b) A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to predict and prevent risk in the early design stage of DI&C systems; (c) Technical bases and risk informed insights to assist users address the risk informed alternatives for evaluation of CCFs in safety-related DI&C systems of NPPs; and (d) A risk informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The research and development efforts of this project in FY 2023 are focused on refining current methods on software CCF modeling and estimation and exploring additional innovative approaches to risk assessment of DI&C systems to enable a more comprehensive and complete assessment of various safety-related DI&C design architectures. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists. It should be noted that all the analyses are performed for the demonstration of the methodology, not for the evaluation of an actual digital control system. Results are obtained based on limited design information and testing data.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

AGC-4 Experiment Irradiation Monitoring Data Qualification Final Report

The Graphite Technology Development Program ran a series of six experiments to quantify the effects of irradiation on nuclear grade graphite. This report focuses on the fourth experiment, Advanced Graphite Creep 4 (AGC 4). The Advanced Reactor Development (ARD) Technology Development Office (TDO) Program for research and development activities require documentation of qualified monitoring data to design and license the first high-temperature reactor nuclear plant. Qualified data meets the requirements for use as described in the experiment planning and quality assurance documents. Failed data do not meet the requirements and provide no useable information. Trend data may not meet all requirements but still provide some useable information. Use of Trend data requires assessment of how any deficiencies affect a particular use of the data. AGC-4 began with Advanced Test Reactor (ATR) Cycle 157D on May 30, 2015. After irradiating the graphite for two cycles, the capsule was removed from the reactor after ATR Cycle 158A, which ended on January 2, 2016, due to interference with another experiment. Irradiation was resumed with Cycle 162A on October 7, 2017 after the interfering experiment was removed from the reactor. AGC-4 irradiation completed by the end of Cycle 166B on January 10, 2020. Between Cycles 162A and 166B, AGC-4 capsule was removed from the reactor core during two Powered Axial Locator Mechanism (PALM) Cycles 163A and 165A to avoid overheating. All thermocouples (TCs) have functioned throughout the AGC-4 experiment. A total of 9,256,184 out of all 11,167,213 temperature records (or 82.9%) are Qualified for use by the ARD Program and 1,911,029 missing values are Failed. Argon, helium, and total gas flow data were within expected ranges, except only eight out-of-range values occurred during outages. A total of 21,240,627 out of all 22,288,5103 gas flow rates (or 92.8%) are Qualified for use by the ARD Program and 1,644,476 are Failed records mostly due to missing values. Discharge gas line moisture values were consistently low during full ATR power, except for 162B, when moisture content was increasing to more than 200 ppmv by the end of this cycle. During outages, moisture content reached as high as 700 ppmv. 1,089,941 out of a total of 1,107,331 moisture values (or 98.4%) are within the measurement range of the instrument and are Qualified for use by the ARD Program and 17,390 missing moisture values are Failed. Graphite creep specimens were subjected to one of three loads: 393, 491, or 589 lbf. For a brief period during Cycle 157D between 12:19 on June 2, 2015, and 08:23 on June 11, 2015, the load cells were wired incorrectly, resulting in missing stack load data. Missing stack loads were estimated from measured ram pressures using regression equations developed from the existing data from Cycle 157D. Estimated stack loads during this period are considered to be an accurate representation of actual load applied to the stacks. These loads deviate slightly from the planned loads. This deviation does not prevent the data from being Qualified for use but must be taken into account when analyzing the effect of load on creep. 6,095,728 out of a total of 6,403,985 moisture values (or 95.2%) are within the measurement range of the instrument and are Qualified for use by the ARD Program and 308,257 missing load values are Failed. Stack displacement increased consistently throughout the eight cycles, with total displacement reached highest value of 2.4 in by the end of irradiation. During ATR outages, a set of pneumatic rams raised the stacks of graphite creep specimens to ensure the specimens were not stuck within the test train. This stack raising was performed seven times throughout irradiation. All stacks were raised successfully each time. 4,744,974 out of a total of 6,094,513 displacement values (or 77.9%) are within the measurement range of the instrument and are Qualified for use by the ARD Program and 1,349,539 displacement values are Failed mostly due to missing values. Analyses were conducted on correlations between TCs to look for trends and step changes that might indicate instrument degradation or failure. Correlation analysis was used to identify instances when TCs form short circuits, referred to as virtual junctions, which result in TCs reporting temperatures from some location in the capsule other than the location where they were intended to read. No evidence of virtual junctions was found. Analyses were also conducted on control charts of temperature differences of between two TCs, which are expected to behave consistently throughout the entire irradiation period. Upward or downward trend over time indicates at least one TC in the pair was drifted. Examining control charts for all 66 possible pairs out of twelve TCs installed in the AGC-4 capsules reveal no clear drift failures occurred, except unstable behavior of two TCs in Zone 3, TC-7 and TC-8, over irradiation time. In conclus

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

A Typing Discipline for High-Assurance Control Systems

This poster describes a typing discipline for high-assurance industrial systems based on three novel type systems. The first type system, information flow control (IFC), controls the flow of data through the system. The second system, dependent session types, restricts messages exchanged during the execution of a communication protocol to avoid dangerous states. The third system uses dimensional analysis to avoid subtle bugs that adversaries can exploit to cause the system to enter a dangerous state. This poster describes how a combination of these approaches can prevent sophisticated cyber attacks, such as the infamous Stuxnet incident, from occurring. In addition, we provide experimental evidence to support the claim that these approaches can be applied in control systems that are resource-constrained.

42 - ENGINEERING↗

2000 Delaware Valley Regional Planning Commission Household Travel Survey

This survey was conducted from March through December 2000 under the auspices of the Delaware Valley Regional Planning Commission and the Southern Jersey Transportation Planning Organization and funded through the Pennsylvania and New Jersey departments of transportation. Cambridge Systematics provided quality assurance under a subcontract to NuStats. The purpose of the survey was to obtain information about work and non-work trip generation, trip distribution, modal choice, and traffic assignment, as well as to obtain data on average vehicle occupancy. The dataset contains demographic and travel data on 5,677 households in the 14-county study area. Of those households, 4,217 were from the 10-county Delaware Valley region of Pennsylvania and New Jersey. The 4,217 Delaware Valley households, when weighted, represent 9,358 members and 6,069 vehicles, and reported a total of 31,631 trips.

1Hz data↗

2023 Operational Assessment Report: Argonne Leadership Computing Facility

In 2004, the U.S. Department of Energy’s (DOE’s) Advanced Scientific Computing Research (ASCR) program established the Leadership Computing Facility (LCF) with a mission to provide the world’s most advanced computational resources to the open science community. The LCF is a huge investment in the nation’s scientific and technological future, inspired by a growing demand for large-scale computing and its impact on science and engineering. The LCF operates two world-class centers in support of open science at Argonne National Laboratory (Argonne) and at Oak Ridge National Laboratory (Oak Ridge) and deploys diverse machines that are among the most powerful systems in the world today. The LCF ranks among the top U.S. scientific facilities delivering impactful science. The work performed at these centers informs policy decisions and advances innovations in far-reaching areas such as energy assurance, ecological sustainability, and global security. The leadership-class systems at Argonne and Oak Ridge operate around the clock every day of the year. The high level of services these centers provide and the exceptional science they produce justify their existence to the DOE Office of Science and the U.S. Congress

97 MATHEMATICS AND COMPUTING↗

Groundwater Monitoring Report, U.S. Department of Energy Y-12 National Security Complex, Oak Ridge, Tennessee

This report contains the groundwater and surface water monitoring data obtained during calendar year (CY) 2019 at the U.S. Department of Energy (DOE) Y-12 National Security Complex (Y-12) on the DOE Oak Ridge Reservation (ORR) in Oak Ridge, Tennessee. The monitoring data were obtained from wells, springs, and surface water sampling locations in three hydrogeologic regimes at Y-12. The Bear Creek Hydrogeologic Regime (Bear Creek Regime) encompasses a section of Bear Creek Valley (BCV) between the west end of Y-12 and the west end of the Bear Creek Watershed (directions are in reference to the Y-12 grid system, shown as Plant North. The Upper East Fork Poplar Creek Hydrogeologic Regime (East Fork Regime) encompasses the Y-12 industrial facilities and support structures in BCV. The Chestnut Ridge Hydrogeologic Regime (Chestnut Ridge Regime) encompasses a section of Chestnut Ridge directly south of Y-12. Background information in Section 2 of this report outlines the hydrogeologic framework for groundwater and surface water quality monitoring at Y-12 and includes an overview of the groundwater contamination in each hydrogeologic regime. Section 3 provides details regarding the groundwater and surface water sampling and analysis activities implemented under the Y-12 GWPP, including sampling locations and frequency, sample collection and handling, field measurements and laboratory analytes, quality assurance (QA)/quality control (QC) sampling, data management, and data quality assessment (DQA). However, the equivalent QA/QC or DQA information for the groundwater and surface water data associated with the monitoring programs implemented by UCOR are not included in this report and instead are deferred to referenced programmatic plans and reports issued by OREM and UCOR. Section 4 of this report presents a summary evaluation of the CY 2019 monitoring data with regard to the respective objectives of surveillance monitoring and exit pathway/perimeter monitoring. The evaluation is based primarily on the analytical results for the following principal groundwater contaminants at Y-12: nitrate, uranium, gross alpha activity, gross beta activity, and volatile organic compounds (VOCs). Section 5 summarizes the most significant findings with respect to the principal contaminants along with recommendations for any proposed changes to the ongoing groundwater and surface water quality monitoring performed under the Y-12 GWPP. Technical reports and plans cited in the narrative sections of the report are listed in Section 6. Narrative sections of this report reference several appendices. Figures (maps and diagrams) and data tables (excluding data summary tables incorporated in the narrative sections) are in Appendix A and Appendix B, respectively. Appendix C contains construction details for each well sampled during CY 2019 by either the Y-12 GWPP or UCOR, along with schematic diagrams for wells equipped with Westbay™ multiport sampling equipment or Barcad® pump systems. Appendix D supports the background summary discussion in Section 2 and provides more detailed information about the hydrogeologic framework for groundwater and surface water monitoring at Y-12, including the primary sources of groundwater contamination in each hydrogeologic regime. Results for all field measurements and laboratory analyses obtained by the Y-12 GWPP and UCOR are presented in Appendix E, which also includes the sample numbers for the QA/QC samples associated with groundwater and surface water monitoring performed by the Y-12 GWPP.

54 ENVIRONMENTAL SCIENCES↗

Panel Session 68: Key EFCOG Actions: Risk Communication, Supply Chain Management, Human Capital and More

Overview on the Energy Facility Contractor Group's (EFCOG) most recent work in partnership with DOE to improve performance and EFCOG's mission is to ensure safety, security, and quality across the US DOE complex. Best practices were highlighted in discussions with US DOE/ NNSA leaders and key project executives. EFCOG's key priorities for 2020 were featured in the panel discussions to include: addressing human capital issues to ensure future mission needs can be met; addressing supply chain issues for nuclear projects; improving the data quality and performance assurance; and improving risk communication and stakeholder relations. EFCOG accomplishes its mission through working groups that provide forums to address common challenges and exchange proven techniques and other management and technical information among member contractors. Panelists with presentations: WM EFCOG Panel Slides (Morgan Smith); EFCOG DOE Supply Chain Initiative (SCI) - Enabling The DOE Mission - (Darrell Graddy); Data Quality and Performance Assurance (JD Dowell); Risk Communication - Different Events - Very Different Responses from the Community (Rick McLeod); Current State of Cybersecurity (Liz Porter)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

HDG-1 Experiment Irradiation Monitoring Data Qualification Final Report

SUMMARY The U.S. Department of Energy (DOE) Advanced Reactor Technologies (ART) Graphite Research and Development (GRD) Program is conducting a series of six experiments to quantify the effects of irradiation on nuclear-grade graphite. This report documents the qualification of irradiation monitoring data for the fifth experiment, High Dose Graphite-1 (HDG-1). Qualified monitoring data are required by the ART program to support the design and licensing of the first high-temperature reactor (HTR) nuclear plant. Data are classified as Qualified if they meet the usage requirements described in the experiment planning and quality assurance (QA) documents, Failed if they do not meet those requirements and provide no usable information, or Trend if they do not fully meet all requirements but still provide useful information subject to an assessment of how any deficiencies may affect a particular use of the data. HDG-1 irradiation began with Advanced Test Reactor (ATR) Cycle 168B on August 24, 2020, and concluded after Cycle 173C on January 27, 2025. The HDG-1 capsule was removed from the reactor core twice—during core internal change (CIC) Cycle 170A and powered axial locator mechanism (PALM) Cycle 172A—to prevent overheating of the graphite specimens during high-power PALM cycles. The capsule was therefore irradiated during a total of seven normal ATR cycles: 168B, 169A, 171A, 171B, 173A, 173B, and 173C. Irradiation monitoring data evaluated in this report include thermocouple (TC) temperature, gas flow rate, gas moisture, gas pressure, specimen load, and graphite stack displacement. Temperature. A total of 14,508,065 TC temperature records were captured. Of these, 13,901,785 (95.8%) are Qualified and 606,280 (4.2%) are Failed. The principal source of failed temperature data was the instrument failure of TC-9 (Zone 2) on June 24, 2024, and TC-10 (Zone 1) on July 5, 2024, near the end of Cycle 173A, which resulted in 595,554 Failed readings. An additional 379 missing values and 10,347 slightly negative values from TC-13 during ATR outages are also Failed. Neither TC-9 nor TC-10 was used as a temperature-control TC, and their failures did not compromise capsule condition monitoring. Correlation analysis of all 13 TCs found no evidence of virtual junction formation. Control chart analysis revealed clear downward drift of approximately 80°C for TC-6 (Zone 3) relative to other stable TCs, and possible downward drift of approximately 60°C for TC-13 relative to the Zone 5 control TC (TC-1), though TC-13 remained consistent with the Zone 2 control TC (TC-12). Gas flow. A total of 20,088,090 gas flow rate records were captured. Of these, 19,941,463 (99.3%) are Qualified and 146,627 (0.7%) are Failed due to missing values. All argon, helium, and total gas flow data were within expected ranges throughout the irradiation. Gas moisture. A total of 1,116,005 outlet gas moisture values were captured. Of these, 1,101,421 (98.7%) are Qualified and 14,584 (1.3%) are Failed, comprising 14,556 out-of-range values and 28 missing values. The out-of-range moisture values exceeded 22,000 ppmv for approximately 1 week at the beginning of Cycle 173A, when accumulated moisture evaporated after the capsule was retrieved from water storage during PALM Cycle 172A and reinserted into the east flux trap. Moisture levels returned to below 25 ppmv for the remaining three cycles, and the transient high-moisture event did not affect the integrity of specimen irradiation. Gas pressure. A total of 7,812,035 gas pressure values were captured. Of these, 6,642,048 (85.0%) are Qualified and 1,169,987 (15.0%) outlet pressure values are Failed, comprising 718,537 zero outlet pressure values due to sensor failure from Cycle 168B through Cycle 171B, 54,550 missing values, and 396,900 too-low outlet pressure values, ranging from 1.1 to 1.6 psia after sensor replacement during Cycle 173A. Load. A total of 6,696,030 load values were captured. Of these, 6,694,580 (99.98%) are Qualified and 1,450 (0.02%) are Failed due to missing values. Applied loads to the six specimen stacks were stable throughout the irradiation. Stack displacement. A total of 6,696,030 displacement values were captured. Of these, 5,713,297 (85.32%) are Qualified and 3,781 (0.06%) are Failed due to missing values. Stack displacement increased consistently throughout the irradiation, reaching approximately 3.08 in. for Channels 5 and 6 by the end of irradiation. 978,952 (14.62%) substantially elevated displacements observed for Channel 6 beginning in Cycle 171A and for Channel 5 beginning in Cycle 173A are assigned Trend status. Raising pressure. A total of 1,115,999 raising pressure values were captured. Of these, 1,115,430 (99.95%) are Qualified and 569 (0.05%) are Failed due to missing values. Ram pressure. A total of 6,696,030 ram pressure values were captured. Of these, 6,692,249 (99.95%) are Qualified and 3,484 (0.05%) are Failed due to missing values. Stack raising was perf

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NORTH DAKOTA CARBONSAFE PHASE III: SITE CHARACTERIZATION AND PERMITTING OF GEOLOGIC STORAGE OF CARBON DIOXIDE

The Energy & Environmental Research Center (EERC), in partnership with Minnkota Power Cooperative Inc. (Minnkota), SLB, and Computer Modelling Group Ltd. (CMG), supported wide-scale deployment of carbon capture and storage (CCS) as part of the U.S. Department of Energy (DOE) National Energy Technology Laboratory Carbon Storage Assurance Facility Enterprise (CarbonSAFE) Initiative Phase III. This phase included the acquisition, analysis, and development of information to fully characterize two storage complexes to demonstrate viable storage resources for commercial volumes of CO2 (defined by DOE as a minimum of 50 million tonnes [MMt] of CO2 within a 30-year period) (National Energy Technology Laboratory, 2024). Phase III also involved the preparation, submission, and approval of North Dakota underground injection control (UIC) Class VI storage facility permits (SFPs)—required precursors to applications for Class VI injection well permits. The presumed viability of commercial-scale CCS, situated adjacent to Minnkota’s Milton R. Young Station (MRYS), is validated by Minnkota’s continued pursuit of Project Tundra—an initiative to build the world’s largest lignite-based CCS project in central North Dakota (www.projecttundrand.com). Project Tundra comprises two scopes of work, Tundra Capture (installation of postcombustion CO2 capture at MRYS) and Tundra SGS (secure geologic storage). The efforts of North Dakota CarbonSAFE Phase III, Site Characterization and Permitting, supported Tundra SGS. Extensive site-specific characterization activities included a successful multimeasurement geophysical approach and drilling a stratigraphic test well (J-ROC 1, subsequently renamed Liberty-1) adjacent to MRYS. Core collection and analyses, downhole testing and fluid sampling, and geophysical logging were performed on J-ROC 1 and on a nearby stratigraphic test well (known as J-LOC 1), which was drilled, cored, and tested under a complementary project funded by the North Dakota Lignite Research Program. The injection tests performed on J-LOC 1 positively impacted the CarbonSAFE project, resulting in fewer proposed injection wells and significant construction, operations, and monitoring cost savings. The characterization data collected and analyses performed were integrated into geologic models, and successive numerical simulations were run to determine CO2 plume extent and subsurface pressure buildup associated with the planned CO2 injection rate of nearly 4 MMt per year. The latter doubles the CarbonSAFE Initiative goal with an estimated 100 MMt of CO2 stored in 20 years. Application of the U.S. Environmental Protection Agency’s (EPA’s) method for estimating the Class VI Rule area of review (AOR) to the overpressurized Broom Creek Formation inspired an alternative method of calculation, called risk-based AOR delineation. This peer-reviewed method was applied for the first time during the storage facility-permitting process. The two SFP applications submitted in 2021 successfully resulted in North Dakota Industrial Commission (NDIC) orders in 2022 authorizing the creation of the storage facility areas and amalgamation of pore space as well as establishing financial responsibility requirements. After approval of the SFPs, Minnkota filed in 2022 applications for permits to reenter the J-ROC 1 well and to drill two new wells—all with the intended purpose to become Class VI injection wells. To establish eligibility under the Internal Revenue Code for Section 45Q tax incentives, a monitoring, reporting, and verification (MRV) plan was prepared and submitted by Minnkota to EPA in 2022, resulting in the first such plan approved in North Dakota. Also in 2022, under the National Environmental Policy Act (NEPA), Minnkota prepared and submitted an environmental information volume (EIV) describing the proposed CCS project and associated potential environmental impacts. Based on the EIV, DOE determined that the proposed construction project required an environmental assessment, and Minnkota submitted the first draft in 2023 and a revised draft in 2024. Both submissions were followed by a public comment period. Subsequently, DOE issued a finding of no significant impact (FONSI) on September 13, 2024. A successful outreach program, strongly based in the production, presentation, and dissemination of informational material, fostered an environment to aid stakeholders in making informed decisions regarding the planned project. Opportunities for public input were provided at various steps along the way, including at county planning and zoning meetings, before and during the SFP administrative hearing, and during environmental assessment public comment periods. In addition, land/pore space owners and mineral owners had various points of contact, including granting access rights, securing pore space leasing, and mineral owner notifications. Based upon the successful storage facility permitting issued by NDIC, approval of the MRV plan by EPA, and receipt of a FONSI under the NEPA, Minnkota is continuing its pursuit of Project Tundra. In December 2023, the Office of Clean Energy Demonstrations under its Carbon Capture Demonstrations Projects Program announced funding for the capture system (Office of Clean Energy Demonstrations, 2023) and a proposal for CarbonSAFE Phase IV: Construction funding was submitted in March 2024 for the storage project. A go/no-go decision to proceed with construction and operations in the Broom Creek Formation is anticipated in 2024. References National Energy Technology Laboratory, CarbonSafe Initiative, https://netl.doe.gov/carbon-management/carbon-storage/carbonsafe (accessed August 2024). Office of Clean Energy Demonstrations, 2023, OCED selects three projects in CA, ND, and TX to reduce harmful carbon pollution, create new economic opportunities, and advance carbon reducing technologies, December, www.energy.gov/oced/articles/oced-selects-three-projects-ca-nd-and-tx-reduce-harmful-carbon-pollution-create-new (accessed August 2024).

Peck, Wesley↗

APPLICATION OF OBJECTIVES-DRIVEN ASSURANCE CASES TO SYSTEM DEVELOPMENT IN AN EVOLVING ACQUISITION MODEL

System properties such as “safety” and “dependability” cannot, in practice, be proven, and must be argued in an “assurance case” aimed at supporting risk-acceptance decisions that have to be made by system acquirers and/or regulatory authorities. The paper is concerned with applications of the “assurance case” idea early in design and development of new systems, when (apart from dedicated testing) the only available operating experience information derives from previous (non-identical) systems. Much of the discussion is based on an evolving acquisition model at the US National Aeronautics and Space Administration; previously, most major systems were developed in-house, but some major systems will now be developed by and acquired from commercial providers. Key points discussed include the following. (1) By promoting a particular kind of focused discussion between acquirers and providers, the use of assurance cases should be particularly valuable under the new acquisition model. (2) In principle, objectives-driven (sometimes called “performance-based”) approaches to assurance of performance have significant advantages in cases where they are applicable. (3) For truly novel systems, completeness of the safety analysis is a significant issue; it is important for the assurance case to include a commitment by the provider (or applicant) to seriously pursue analysis of operating experience, so that previously unrecognized hazards can be identified and addressed. (4) Inquiries into major accidents often point to deficiencies in management oversight in all parts of the life cycle; management processes need to be addressed in the formulation and the implementation of an assurance case. Under the new acquisition model, these considerations imply a serious reconsideration of the way in which the development process is managed by both providers and acquirers.

99 GENERAL AND MISCELLANEOUS↗

Application of Objectives-Driven Assurance Cases to System Development in an Evolving Acquisition Model

System properties such as “safety” and “dependability” cannot, in practice, be proven, and must be argued in an “assurance case” aimed at supporting risk-acceptance decisions that have to be made by system acquirers and/or regulatory authorities. The paper is concerned with applications of the “assurance case” idea early in design and development of new systems, when (apart from dedicated testing) the only available operating experience information derives from previous (non-identical) systems. Much of the discussion is based on an evolving acquisition model at the US National Aeronautics and Space Administration; previously, most major systems were developed in-house, but some major systems will now be developed by and acquired from commercial providers. Key points discussed include the following. (1) By promoting a particular kind of focused discussion between acquirers and providers, the use of assurance cases should be particularly valuable under the new acquisition model. (2) In principle, objectives-driven (sometimes called “performance-based”) approaches to assurance of performance have significant advantages in cases where they are applicable. (3) For truly novel systems, completeness of the safety analysis is a significant issue; it is important for the assurance case to include a commitment by the provider (or applicant) to seriously pursue analysis of operating experience, so that previously unrecognized hazards can be identified and addressed. (4) Inquiries into major accidents often point to deficiencies in management oversight in all parts of the life cycle; management processes need to be addressed in the formulation and the implementation of an assurance case. Under the new acquisition model, these considerations imply a serious reconsideration of the way in which the development process is managed by both providers and acquirers.

99 GENERAL AND MISCELLANEOUS↗

Summary of Technical Peer Review on the Risk Assessment Framework proposed in Report INL/RPT-22-68656 for Digital Instrumentation and Control Systems

This report summarizes the peer review activities initiated by Idaho National Laboratory (INL) during fiscal year (FY) 2023 for the evaluation and improvement of the methodology developed under the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective and secure DI&C technologies for digital upgrades/designs. A framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the risk impact of plant modernization, considering the introduction of high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. The R&D efforts of this project from FY 2019 through FY 2022 were focused on methodology improvement and demonstration of the proposed framework for the risk assessment and design optimization of safety-critical DI&C systems. Collaborations with the nuclear industry have been initiated to support the reliability and risk assessment of their DI&C systems by using the proposed framework. In FY 2023, the framework has reached to a point for a technical peer review and obtain stakeholder feedback. This peer review activity includes coordination of the reviews performed by a group of industry stakeholders, documentation of the peer review suggestions, providing resolutions and responses to the peer review comments. The objective of this technical peer review is to obtain representative feedback on the proposed framework to improve the technical qualities of its methodology and readiness for deployment to the industry. Feedback may identify potential areas for improvement and further development. The Subject Matter experts were invited to review the latest project report documenting the methodology developed in the project and provide evaluations of the technical qualities of the proposed framework and relevant methods. The reviewed project report is “An Integrated Framework for Risk Assessment of High Safety-significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology and Demonstration” INL/RPT-22-68656 (short as “INL/RPT-22-68656” in this report). This peer review report documents the technical questions provided for technical peer review and introduces the technical peer reviewers from the stakeholders including nuclear utilities, regulators, and universities. Comments from technical peer reviewers and the resolutions and responses to these comments are outlined. Insights and lessons learned from the technical peer review are summarized in conclusions and future work. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists.

99 GENERAL AND MISCELLANEOUS↗

PTSFA QA Review of Container Procurements: Information Use Procedure

The purpose of this Packaging and Transportation Safety Functional Area (PTSFA) procedure is to describe the process in which the PTSFA Quality Assurance Engineer (QAE) or designee reviews and approves the documentation associated with the procurements of containers to be used for onsite transfer or off-site transportation of hazardous materials and waste.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Radiometric Standards and Best Practices: Recent Progress

International standards and best practices for solar resource assessments provide assurance for traceable measurements associated with a low uncertainty. This benefits the solar energy industry by reducing the investment risks through heightened confidence in the solar resource information. NREL, in collaboration with international organizations, such as subcommittees G03 of ASTM (Radiometry) and TC180/SC1 of ISO (Climate measurement and data), recently revised some standards that are widely used by the solar industry. These include radiometric standards that assist in (i) maintaining calibration traceability; (ii) uncertainty analysis; (iii) measurement quality assurance, and (iv) establishing reference spectral irradiance distributions. The latter are widely used by the solar community to evaluate the actual absorptance, reflectance, and transmittance of solar energy materials, or the performance of solar energy devices and systems, relative to standard conditions. This paper provides a summary of the recent changes brought to these standards as a way to better support the solar energy industry.

industries↗

Data Center Cybersecurity, Supply Chain Risk Management, and Emerging Regulation Cohort Summary: Takeaways and Action Plans

This report summarizes the outcomes of the Data Center Cohort under the Department of Energy’s Technical Assistance for Digital Assurance (TADA) initiative, aimed at enhancing grid resilience through cybersecurity, supply chain risk management (SCRM), and Cyber-Informed Engineering (CIE). The cohort engaged 17 organizations across utilities, data center operators, vendors, and technology providers in three sessions combining presentations, discussions, and exercises. Key topics included AI-driven load behavior, cybersecurity vulnerabilities in UPS/BESS and cooling systems, governance gaps at utility–data center boundaries, and supply chain integrity. Five cross-cutting themes emerged: interconnection architecture vulnerabilities, fragmented governance, AI-driven stability risks, lack of regulatory frameworks, and long-term supply chain concerns. Actionable recommendations were developed, including implementing DMZ segmentation, formalizing vendor access agreements, designing AI workload limits, and advancing standards through NERC and state-level programs. These strategies aim to strengthen resilience, clarify responsibilities, and ensure secure integration of data centers into the grid.

24 - POWER TRANSMISSION AND DISTRIBUTION↗