SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Explore the source record for details and available documents.
This report presents an analysis of the Emergency Core Cooling System (ECCS) for a generic Boiling Water Reactor (BWR)-4 NPP. The Electric Power Research Institute (EPRI) developed Hazards and Consequences Analysis for Digital Systems (HAZCADS) process is applied to the ECCS and its subsystems to identify unsafe control actions (UCAs) which act as possible cyber events of concern. The analysis is performed for two design basis events: Small-break Loss of Coolant Accident (SLOCA) and general transients (TRANS), such as unintended reactor trip. In previous work, HAZCADS UCAs were combined with other cyber-attack analysis to develop a risk-informed approach; however, this was for a single system. This report explores advanced systems engineering modeling approaches to model the interactions between digital assets across multiple systems which may be targeted by cyber adversaries. The complex and interdependent design of digital systems has the potential to introduce emergent cyber properties that are generally not covered by hazard analyses nor formal nuclear Probabilistic Risk Assessment (PRA). The R&D and supporting analysis presented here explores approaches to predict and manage how interdependent system properties effect risk. To show the potential impact of a successful cyber-attack to formal PRA event tree probabilities, HAZCADS analysis was also used. HAZCADS was also used to model the automatic depressurization system (ADS) automatic actuation. This analysis extended to an integrated system analysis for common-cause failure (CCF). In this aspect, the HAZCADS analysis continued by analyzing plant design details for system connectivity in support of critical plant functions. A dependency matrix was developed to depict the integrated functionality of the interconnected systems. Areas of potential CCF are indicated. Future work could include adversary attack development to show how CCF could be caused, resulting in PRA events. Across the multiple systems that comprise the ECCS, the analysis shows that the change in such probabilities was very different between systems. This indicates that some systems have a larger potential risk impact from successful cyber-attack or digital failure, which indicates a need for these systems to have a higher priority for design and defensive measures. Furthermore, we were able to establish that a risk analysis using any arbitrary threat model establishes an ordering of components with regard to cyber-risk. This ordering can be used to influence the overall system design with an eye to lowering risk, or as a way to understand real-time risk to operational systems based on a current threat landscape. Expert knowledge of both the analysis process and the system being analyzed is required to perform a HAZCADS analysis. The need for a tiered risk analysis is demonstrated by the results of this report.
After completion of this course, the analyst will understand the differences between an unmitigated analysis and a mitigated analysis. After completion of this course, the analyst will know the key receptors that a radiological and hazardous chemical accident analysis must consider. After completion of this course, the analyst will understand how to calculate a radiological release source term and a toxic chemical release source term for various phenomenology. After completion of this course, the analyst will understand how to calculate a radiological and toxic chemical health insult to key receptors and compare to consequence thresholds. After completion of this course, the analyst will understand the role of atmospheric dispersion in radiological and toxic consequence calculations. After completion of this course, the analyst will understand atmospheric dispersion modeling and the inputs to and outputs from the MACCS/POSTMAX codes.
There are numerous vehicles which utilize alternative fuels, or fuels that differ from typical hydrocarbons such as gasoline and diesel, throughout the world. Alternative vehicles include those running on the combustion of natural gas and propane as well as electrical drive vehicles utilizing batteries or hydrogen as energy storage. Because the number of alternative fuels vehicles is expected to increase significantly, it is important to analyze the hazards and risks involved with these new technologies with respect to the regulations related to specific transport infrastructure, such as bridges and tunnels. This report focuses on hazards presented by hydrogen fuel cell electric vehicles that are different from traditional fuels. There are numerous scientific research and analysis publications on hydrogen hazards in tunnel scenarios; however, compiling the data to make conclusions can be a difficult process for tunnel owners and authorities having jurisdiction over tunnels. This report provides a summary of the available literature characterizing hazards presented by hydrogen fuel cell electric vehicles, including light-duty, medium and heavy-duty, as well as buses. Research characterizing both worst-case and credible scenarios, as well as risk-based analysis, is summarized. Gaps in the research are identified to guide future research efforts to provide a complete analysis of the hazards and recommendations for the safe use of hydrogen fuel cell electric vehicles in tunnels.
A resilience analysis of a water distribution system is greatly enhanced by the integration of up-to-date geospatial data describing the water system, hazards, and surrounding community. The Water Network Tool for Resilience (WNTR), an open-source Python package designed to simulate and analyze the resilience of water distribution systems, was recently updated to incorporate geographic information system (GIS) data into the resilience analysis. This paper describes the GIS capabilities and includes a case study using the drinking water distribution system model for a large city in Pennsylvania. The case study focuses on potential pipe damage from landslides and on pipes that are particularly difficult to repair. The analysis couples data on hazards, social vulnerability, and the location of emergency services to identify and prioritize high-impact critical infrastructure for mitigation. Results demonstrate that pipes can be prioritized for mitigation based on water shortage and vulnerable populations that are affected. In conclusion, the methods can be adopted for general use and are available as part of the WNTR software.
Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. THE CHERNOBYL ACCIDENT: 1 Chernobyl Accident Management Actions, A. R Sich; GENERAL SAFETY CONSIDERATIONS: 25 The IAEA-ASSET Approach to Avoiding Accidents is to Recognize the Precursors to Prevent Incidents, F. Reisch; ACCIDENT ANALYSIS: 36 A Review of the Available Information on the Triggering Stage of a Steam Explosion, D. F. Fletcher; 58 Analysis and Modeling of Flow-Blockage-Induced Steam Explosion Events in the High-Flux Isotope Reactor, R. P. Taleyarkhan, V. Georgevich, C. W. Nestor, U. Gat, B. L. Lepard, D. H. Cook, J. Freels, S. J. Chang, C. Luttrell, R. C. Gwaltney, and J. Kirkpatrick; 74 An Analysis of Disassembling the Radial Reflector of a Thermionic Space Nuclear Reactor Power System, M. S. El-Genk and D. V. Paramonov; CONTROL AND INSTRUMENTATION: 86 Standards for High-Integrity Software, D. R. Wallace, D. R. Kuhn, L M. Ippolito, and L. Beltracchi; DESIGN FEATURES: 98 Adoption of New Design Features for the Next Generation Nuclear Power Reactors, L. S. Tong; 114 Review of Nuclear Piping Seismic Design Requirements, G. C. Slagis and S. E. Moore; ENVIRONMENTAL EFFECTS: 128 PC-Based Probabilistic Safety Assessment Study for a Geological Waste Repository Placed in a Bedded Salt Formation, S. A. Khan; OPERATING EXPERIENCES: 142 Managing Aging in Nuclear Power Plants: Insights from NRC’s Maintenance Team Inspection Reports, A. Fresco and M. Subudhi; 150 Reactor Shutdown Experience, Compiled by J. W. Cletcher; 153 Selected Safety-Related Events, Compiled by G. A. Murphy; RECENT DEVELOPMENTS: 158 Reports, Standards, and Safety Guides, D. S. Queener; 168 Proposed Rule Changes as of Dec. 31, 1993; ANNOUNCEMENTS: 177 Symposium on Radioactive and Mixed Waste—Risk as a Basis for Waste Classification; 177 1995 Incineration Conference 178 Ninth Power Plant Dynamics Control and Testing Symposium; 174 The Authors
Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 477 Report on the International Symposium on the Use of Probabilistic Safety Assessment for Operational Safety—PSA '91, S. Chakraborty and M. Khatib-Rahbar; 488 Good Relationships Are Pivotal in Nuclear Data Bases, A. S. Heger and B. V. Koen; 494 Technical Note: The Interagency Nuclear Safety Review Panel's Evaluation of the Ulysses Space Mission, J. A. Sholtis, Jr., D. A. Huff, L. B. Gray, N. P. Klug, and R. O. Winchester; ACCIDENT ANALYSIS: 502 The Severe Accident Analysis Program for the Savannah River Nuclear Production Reactors, M. L. Hyder; CONTROL AND INSTRUMENTATION: 511 A Framework for Selecting Suitable Control Technologies for Nuclear Power Plant Systems, R. A. Kisner; DESIGN FEATURES: 521 Containments for Gas-Cooled Power Reactors History and Status, P.W. Williams; ENVIRONMENTAL EFFECTS: 537 Indoor Radon: A Natural Risk, N. H. Harley and J.H. Harley; On the Importance of the Atmospheric Parameters in the Fission Products Distribution of a Severe Reactor Accident, M. C. Barla and A. R. Bayulken; Book Review: Health Effects of Exposure to Low Levels of Ionizing Radiation BEIR V, C. R. Richmond; WASTE AND SPENT FUEL MANAGEMENT: 555 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver OPERATING EXPERIENCES: 567 Effects of Component Aging on the Westhinghouse Control Rod Drive System, K. Sullivan and W. Gunther; 577 Reactor Shutdown Experience, Compiled by J. W. Cletcher, 580 Selected Safety-Related Events, Compiled by G. A. Murphy; 582 Operating U 8 Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver, RECENT DEVELOPMENTS: 596 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 610 Reports, Standards, and Safety Guides, D. S. Queener; 614 Proposed Rule Changes as of June 30, 1991; ANNOUNCEMENTS: 520 Workshop on PC PRAISE: A Probabilistic Fracture Mechanics Personal Computer Code for Nuclear Power Plant Piping Reliability Assessment; 536 Fifth Workshop on Nuclear Power Plant Containment Integrity; 624 New OECD "International Information System on Occupational Exposure (ISOE)"; 625 Harvard School of Public Health Announces Short Courses; 625 Eighth Power Plant Dynamics, Control and Testing Symposium; 626 Second Training Course on Off-Site Emergency Planning and Response for Nuclear Accidents; 618 The Authors; 622 Reviewers of Nuclear Safety, Vol 32.
The Failure Modes and Effects Analysis (FMEA) is a qualitative reliability technique for systematically analyzing each possible failure mode within a hardware system, and identifying the resulting effect on that system, the mission, and the personnel. This submission includes an updated FMEA summary for CalWave's open water demonstration including pre- and post-mitigation results, hazard identification (HAZID) analysis, and component/function rooted FMEA.
This assessment analyzes Environment, Safety, and Health (ES&H) occurrences and Non-Occurrence Trackable Events (NOTEs) from fiscal year (FY) 2021. For this report, assessors used three primary methods for categorizing occurrence and NOTE data: issue categorization, DOE reporting criteria groups, and DOE cause codes. The FY 2021 Q1 occurrence and NOTE total was the lowest since this type of analysis began in FY 2018 Q4, following a downward trend from the FY 2019 Q3 high point. The FY 2021 Q2 occurrence and NOTE total was nearly double the FY 2021 Q1 total; occurrence totals declined slightly in Q3 and Q4, while NOTE totals remained the same. NOTEs in each of the final three quarters were more than double the amount from Q1. This assessment resulted in one observation. As COVID-19 vaccination rates increase and COVID 19 impacts on operations decrease, the number of workers on-site and the amount of activity-level work will increase. With these changes, focused attention on the following areas related to work planning and controls may reduce the probability of future events, hazard identification and analysis, compliance with standards, formality of operations, and job scoping.
Systems theoretic process analysis (STPA) is becoming an increasingly popular technique to assess how complex digital software systems can fail. Rather than defining failures by their observable failure events, which may be sparse especially for safety rated nuclear digital instrumentation and control systems (DI&C), failures are defined as postulated unsafe actions under specific contextual conditions. This permits a top-down analysis of system hazards and identifies whether imposed constraints and requirements can sufficiently address undesirable hazards. However, STPA is a qualitative approach at identifying inadequacies in the development process and cannot currently be used to quantify unsafe action likelihoods for probabilistic risk assessment. Therefore, in this work, we examine the root causes of software failure and explore whether a consistent correlation can be linked to specific unsafe action classes. We implement Lbl2Vec, an unsupervised document classification and retrieval algorithm, on a database of 4,096 software defect reports acquired from various open-source software systems. By analyzing sentence structure, embedded labels, and word vectors, we show that certain defect types positively correlate to specific unsafe action classes over others. The correlations developed can be used to estimate the failure probability of safety intended DI&C systems which provides a licensing basis for nuclear plant modernization efforts.
Systems theoretic process analysis (STPA) is becoming an increasingly popular technique to assess how complex digital software systems can fail. Rather than defining failures by their observable failure events, which may be sparse especially for safety rated nuclear digital instrumentation and control systems (DI&C), failures are defined as postulated unsafe actions under specific contextual conditions. This permits a top-down analysis of system hazards and identifies whether imposed constraints and requirements can sufficiently address undesirable hazards. However, STPA is a qualitative approach at identifying inadequacies in the development process and cannot currently be used to quantify unsafe action likelihoods for probabilistic risk assessment. Therefore, in this work, we examine the root causes of software failure and explore whether a consistent correlation can be linked to specific unsafe action classes. We implement Lbl2Vec, an unsupervised document classification and retrieval algorithm, on a database of 4,096 software defect reports acquired from various open-source software systems. By analyzing sentence structure, embedded labels, and word vectors, we show that certain defect types positively correlate to specific unsafe action classes over others. The correlations developed can be used to estimate the failure probability of safety intended DI&C systems which provides a licensing basis for nuclear plant modernization efforts.
Code of Federal Regulation (CFR) 10 CFR 830, Nuclear Safety Management [1], explicitly identifies hazardous materials in addition to radioactive materials when establishing the scope of materials that must be evaluated in Hazard Category (HC) 1, 2, and 3 nuclear facilities. This inclusion has led to a near decade-long progression of more and more rigorous application of chemical hazard controls in these facilities. The progressive addition of more rigorous chemical hazard controls has occurred across the Department of Energy (DOE) Complex, having been driven by contractors and regulators alike. However, chemical hazards in other DOE facilities have been, and continue to be, controlled using traditional industrial safety centered strategies. Thus, identical chemical hazards are controlled using dramatically different approaches based solely on the facility type. Not only are the controls different, the analysis and derivation rigor and requirements are also significantly different. In particular, chemical control derivation and application in non-nuclear facilities are much less onerous than the comprehensive hazard analysis process used in nuclear facilities, even in circumstances in which chemicals are not initiators to, or do not exacerbate a nuclear event. While the derivation and control approaches used in these two types of facilities are disparate, the safety results are similarly effective based on a review of reported chemical events from 2014 through 2018. While both approaches achieve comparable safety outcomes, the approach used in nuclear facilities results in significantly greater preparation costs and implementation costs. Furthermore, the problem with the differing approach is not relegated to the control preparation and implementation burden. The operational impact of potentially unnecessary controls slows mission completion without a corresponding increase in safety, not to mention the dilution of the importance of Technical Safety Requirements. The proposed solution must first include a critical and thorough examination of DOE Complex and top-tier chemical industry chemical hazard control practices, coupled with a similar examination of the driving facility regulatory requirements. Results from the examination can then be used to fuel a bold departure from current chemical control practices in Hazard Category 1, 2, and 3 nuclear facilities. Development of an improved and consistent chemical hazard control process would follow, one that continues to ensure safety while accelerating mission completion and significantly reducing the burden associated with chemical hazard control development and implementation. The improved process must establish a hierarchy where radiological hazards are addressed using safety class and safety significant controls and chemical hazards are addressed using overarching safety management programs (with limited unique exceptions). The improved Hazard Category 1,2, and 3 nuclear facility chemical hazard control strategy, while compliant with 10 CFR 830 [1], would be founded on the requirements in 10 CFR 851, Worker Safety and Health Program [2], and the complementary DOE O 151.1D, Comprehensive Emergency Management System [3]. In this way, the Hazard Category 1, 2, and 3 nuclear facility chemical hazard control strategy would, wherever appropriate, be the same process used at other DOE Complex facilities. Ultimately, the improved process will maintain safety and significantly reduce costs and life cycle risk through faster mission completion. (authors)
This report presents a quantitative assessment of the current INL Site air monitoring network using frequency of detection (FD) methods. The first assessment of the INL network was performed in 2015 and made recommendations for improving the network. As a result of changes made in response to the recommendations and the addition of new source locations, the network was modified and reassessed in 2017. Since 2017, administration of the air sampling program has been consolidated under one contractor, which resulted in additional changes to the network (sampler numbers and locations) and changes in radionuclide detection levels. As a result of these changes and others, an updated assessment of the INL Site ambient air monitoring network was performed. The same two exposure scenarios used in previous assessments were used for this assessment: a resident scenario and a shepherd/rancher scenario. The resident was assumed to be continuously present at their residence/business/farm operation outside the INL Site boundary while the shepherd/rancher was assumed to be present 24-hours at the nearest INL grazing allotment boundary in each of the 22.5-degree sectors along the sector centerline from each source. Updates to both the resident and shepherd/rancher receptor locations were included. Other changes include updates to flow rates for stack sources, expansion of the list of important radionuclides based on the most recent National Emission Standards for Hazardous Pollutants (NESHAPs) analysis, and updated dose coefficients. The assessment was conducted to determine whether the current INL monitoring network is capable of detecting releases of important radionuclides from INL Site sources that have the potential to exceed a conservative dose threshold for the two exposure scenarios. The assessment revealed that for the resident scenario, the current network meets the desired performance objective (FD = 95%) for all radionuclides and sources except for Cl-36 from the TRA-770 stack (94.4%). For the shepherd/rancher scenario, the FD performance objective is met for all radionuclides and sources except tritium from MFC-774 and TAN 679 (91% for both). An investigation of reported emissions for the past three years revealed that Cl 36 is not emitted from TRA-770, and routine tritium emissions from MFC-774 and TAN-679 are very small and the sources are likely incapable of emitting enough tritium to cause a release that should be detectable by the monitoring network. This assessment is based on a conservative dose threshold. This coupled with fact that the FD for Cl 36 is only slightly less than the performance objective and Cl-36 is not emitted from TRA-770, modifying the network (i.e. adding another sampler, increasing sampler flow rate, moving samplers) to meet the 95% performance objective for this radionuclide/source/receptor scenario is not warranted. Similarly, because tritium emissions from MFC-774 and TAN-679 are very small and these two sources are likely incapable of causing a dose due to tritium release that should be detectable by the network, modifications to increase tritium detection for these sources is also unwarranted at this time. However, if it is required to meet the performance objective for tritium for all sources and receptor scenarios, additional analysis determined the FD could be raised from 91% to > 99% for both sources by adding two tritium samplers to the network.
This report details an assessment of the hazards and safety impacts related to front-end operations of molten salt reactors (MSR) as well as an assessment of existing safety guidance. Publicly available information was evaluated to make recommendations to the U.S. Nuclear Regulatory Commission (NRC) for guidance development and information gathering needs. Five different MSR technologies were evaluated along with information from 1960’s about the Atomic Energy Commission programs for the Aircraft Reactor Experiment and Molten Salt Reactor Experiment. Primary areas of evaluation include fuel cycle facilities, transportation and at reactor fuel mixing operations up to reactor startup. In general, there was difficulty synthesizing publicly available information due to the early stage of the MSR development and proprietary information associated with the reactor technology companies analyzed. There are a few specific recommendations from this report. One overarching paradigm shift that the NRC needs to evaluate is the possibility of collocating fuel cycle facilities with operating MSRs. Although there is no specific prohibition to this in the NRC regulations, the collocation of the fuel cycle facilities with the operating MSR presents a novel approach compared to the light water reactor baseline. More guidance and research into thorium operations and regulation is needed. The hazards associated with the stability of stored fuel constituents need to be evaluated. Some reactor fuel cycles use beryllium, and its use and the associated hazards need further analysis. NRC-approved designs for transportation packages for shipping molten salt fuels and factory-built and fueled reactors are not available.
Thermal ignition of radioactive waste within a 55-gallon drum was simulated by using a pressure-dependent waste decomposition model (Hobbs et al. in Process Saf Environ Prot https://doi.org/10.1016/j.psep.2022.09.047, 2022) calibrated with data from full-scale drum experiments (Parker et al. in The thermolytic response of a surrogate RNS waste mixture at the drum scale. Los Alamos National Laboratory Report LA-UR-16-21760, 2016) and validated with experiments from multiple laboratories (Hobbs et al. in Thermal analysis of aged nitric acid-soaked kitty litter in TRU waste drums-23370.WM2023 Conference, Phoenix, AZ, 2023). The acceleration of nitric acid chemistry reacting with an organic cat litter leading to thermal ignition was likely triggered by a restricted vent in the drum. Here, we address whether the form of the rate equation in (Hobbs et al. in Process Saf Environ Prot https://doi.org/10.1016/j.psep.2022.09.047, 2022) is sufficient to extrapolate thermal ignition within aged drums of similar content that have been stored in Texas for over nine years by investigating four different reaction rate forms for waste decomposition. A critical reaction rate reduction analysis is performed on each of these models to determine if delayed thermal runaway within vented aged waste is possible after nine years. We found that a pressure-dependent first-order rate expression not only predicted the accidental ignition of the waste drum, but the form also matches multiple experiments from different laboratories. Even though the waste composition decreases over time, the model predicts that acceleration leading to thermal runaway is possible if the waste is confined, even after 9 years. In conclusion, waste containing oxidizers such as nitric acid should not be mixed with organic adsorbents, especially if the waste is confined.
While resonance ionization mass spectrometry (RIMS) has demonstrated utility in measuring isotopic compositions of elements in complex matrices without the need for chemical separation to remove isobaric interferences, it has had limited application in measuring elemental compositions. The ability to determine elemental compositions via an in situ method like RIMS would be an exceptional asset in spent nuclear fuel analysis, where they are important in assessing reactor histories and whose chemical separation presents a radiological hazard. However, quantitative elemental analysis by RIMS requires special considerations because each element is ionized by its own set of lasers tuned to element specific resonant ionization wavelengths. We present the first comprehensive study of measuring elemental ratios by RIMS in spent nuclear fuel. All actinides produced by neutron capture are enhanced significantly radially from the center to the edge of a fuel pellet. This edge effect is not readily accessible by conventional bulk measurements.
Migration of pollutants and hazardous wastes, potentially containing radioactive isotopes, via groundwater transport is a concern at most waste cleanup sites. Predictive analysis can be used to evaluate mitigating actions intended to minimize impact on the environment and public exposure. GOTHIC is a multipurpose thermal hydraulics code that is used extensively in the nuclear industry for design, licensing and operation evaluations. It combines the capabilities of typical one-dimensional system codes and the essential features of Computational Fluid Dynamics (CFD) codes for three-dimensional analysis. There are other codes that are specifically developed for groundwater transport analysis and the results presented here are consistent with prior analyses. However, GOTHIC has some unique features that offer advantages for applications related to nuclear waste. Most importantly, it has been developed and maintained under a Quality Assurance program in compliance with the requirements of 10CFR50 Appendix B [2] and applicable portions of ASME NQA-1 [3] since 1995. Available GOTHIC capabilities that make the code especially useful for groundwater transport of nuclear materials include: - Tracking of any number of tracer elements for contaminants and other species of interest; - Radioactive decay and progeny of tracer elements; - Adsorption/desorption of tracer elements; - Tracking of any number of dissolved gases; - Release and absorption for dissolved gases; - Vapor phase tracking; - Non-Newtonian fluid modeling. The general porous body modeling approach makes GOTHIC well suited to groundwater transport analysis. The multi-region modeling approach used by GOTHIC simplifies model construction for regions of varying hydrologic characteristics and focuses the computational effort on regions of particular interest while simultaneously capturing the macroscopic response and any feedback effects across the larger domain. The applicability of GOTHIC to groundwater transport applications is demonstrated by comparing code results with available analytic or semi-analytic solutions for groundwater behavior. (authors)
The paper provides the approach to providing a benefit cost analysis of energy and water alternatives to provide resilience to extreme events. The approach estimates the costs and returns of providing greater resilience of water and energy infrastructure. Extreme events are defined as high impact, low-frequency events such as, but not limited to, hurricanes, floods, storm surges and earthquakes. The provides justification for hardening water and energy infrastructure. Resilience is defined as “the ability to prepare for and to withstand an extreme event with little or no damage, or to recover more quickly from an extreme event.” The approach can be summarized as follows. The approach requires the development of a baseline with which to compare alternatives. The baseline is used to evaluate the baseline’s resilience to hazards through the probability of the hazard(s), the likelihood of damage from that the hazard through a vulnerability analysis, and the consequence to calculate a cost of the damage. The approach then evaluates proposed mitigation alternatives that would improve the resilience of the system. Each alternative is evaluated based on probability of the hazard, probability of vulnerability and consequence to determine the reduced damage that each alternative presents. The approach includes any monetary and non-monetary benefits that can quantified for each of the alternatives. Non-quantifiable benefits are evaluated based on the relative importance of each alternative to the criteria used to determine how well the alternative meets the goals and objectives of the site/facility. Then, a life cycle cost analysis should be conducted for the baseline and alternatives. Finally, the results of the life cycle analysis should be presented in a decision matrix with cost, net present value, benefit/cost ratios, and any non-monetary criteria ranked to show how well the alternatives met the criteria, weighted with the decision maker’s weights and the results presented.