Search NASA⌕ Search

SEARCH · Search NASA

Results for “Risk Based Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

Low-Temperature Geothermal Resources: Relevant Data and PFA Methods to Reduce Development Risk: Preprint

This project is part of a larger national effort focused on demonstrating the multi-faceted value of integrating low-temperature geothermal resources into national decarbonization strategies and community energy plans. Low-temperature geothermal resources are defined as reservoirs-natural or engineered-with temperatures < 150 degrees C. While the focus in the NREL effort is on geothermal heating and cooling (GHC), resources at the upper end of this temperature range can also be used for small-scale power generation. However, low-temperature geothermal resources have not been studied as extensively as higher-temperature geothermal resources. We identified three major classes of low-temperature geothermal play types: sedimentary basins, orogenic systems, and radiogenic systems. We developed workflows for evaluating the potential of these resources building off the Play Fairway Analysis (PFA) approach to de-risking geothermal exploration. This PFA-based approach to low-temperature geothermal resources includes: (1) identifying relevant data; (2) grouping and weighting of relevant datasets into PFA criteria (e.g., geological, risk, economic criteria); (3) developing favorability or common risk maps for low-temperature geothermal resources to identify potential locations for more focused data collection; and (4) estimating electric power generation and heating potential at those locations using the GeoRePORT Resource Size Assessment Tool. This project will facilitate future deployment of GHC by providing data, tools, and workflows applicable to low-temperature geothermal resources.

favorability maps↗

Low-Temperature Geothermal Resources: Relevant Data and PFA Methods to Reduce Development Risk

This project is part of a larger national effort focused on demonstrating the multi-faceted value of integrating low-temperature geothermal resources into national decarbonization strategies and community energy plans. Low-temperature geothermal resources are defined as reservoirs-natural or engineered-with temperatures < 150 degrees C. While the focus in the NREL effort is on geothermal heating and cooling (GHC), resources at the upper end of this temperature range can also be used for small-scale power generation. However, low-temperature geothermal resources have not been studied as extensively as higher-temperature geothermal resources. We identified three major classes of low-temperature geothermal play types: sedimentary basins, orogenic systems, and radiogenic systems. We developed workflows for evaluating the potential of these resources building off the Play Fairway Analysis (PFA) approach to de-risking geothermal exploration. This PFA-based approach to low-temperature geothermal resources includes: (1) identifying relevant data; (2) grouping and weighting of relevant datasets into PFA criteria (e.g., geological, risk, economic criteria); (3) developing favorability or common risk maps for low-temperature geothermal resources to identify potential locations for more focused data collection; and (4) estimating electric power generation and heating potential at those locations using the GeoRePORT Resource Size Assessment Tool. This project will facilitate future deployment of GHC by providing data, tools, and workflows applicable to low-temperature geothermal resources.

favorability maps↗

Development of the Suited Injury Modes and Effects Analysis for Identification of Top Injury Risks in Lunar Missions and Training

A new Exploration Extravehicular Activity Suit (xEVAS) is being designed to replace the current Extravehicular Mobility Unit (EMU) for the National Aeronautics and Space Administration’s (NASA’s) Artemis program to return astronauts to the lunar surface. This new suit will allow for increased range of motion compared the current EMU and Apollo era suits and will have additional features that will enhance the health and safety of exploration. With the design of lunar missions and the xEVAS progressing, it is important to consider possible injuries and injury mechanisms that could occur in the suit. To address these concerns, the suited Injury Modes and Effects Analysis (IMEA) was developed to outline suited injury scenarios and rank them based on risk score. The IMEA documents possible scenarios and underlying mechanisms of injury while wearing an extravehicular activity (EVA) suit. Tasks during lunar surface EVA as well as training events to prepare for lunar missions were considered as history has shown that more suit injuries occur during training than in flight. Each scenario is ranked with a consequence and likelihood scoring based on our current understanding of the suit and Artemis design reference missions to identify high-risk cases that will drive further work in suited injury. Injuries, mechanisms of injury, and mitigation strategies are evaluated within each scenario. The Suited Injury Summit was held on January 5, 2022, to vet the IMEA with external experts. This was an all-day virtual meeting with the suited injury team, ergonomists, suit engineers, safety engineers, the flight operations directorate, flight doctors, astronauts, astronaut strength, conditioning, and rehabilitation specialists (ASCRS), and external subject matter experts (SMEs). External SMEs consisted of surgeons with varying specialties. The intent of this meeting was to walk through the top injury risks identified in the analysis, identify any gaps that were not captured, and discuss mitigations. With participation from all groups, countless lessons-learned came from the Summit meeting. Using the lessons-learned and discussion from the Summit, the top 10 risks have been identified: neutral buoyancy laboratory training, hand/glove injuries, poor suit fit, field training, specific EVA tasks/design of task, boots/ankle injuries, falls from heights, background radiation, repetitive contact, and ambulation/long-distance ambulation. Mitigation steps have also been determined for each of the top risks. The IMEA and documentation of top risks is a living document. Yearly meetings are planned to update the analysis and reevaluate top risks and mitigations. The IMEA is being used to drive work in suited injury, and this work will continue to evolve with IMEA and lunar mission updates.

Teresa Reiber↗

Development of the Suited Injury Modes and Effects Analysis for Identification of Top Injury Risks in Lunar Missions and Training

A new Exploration Extravehicular Activity Suit (xEVAS) is being designed to replace the current Extravehicular Mobility Unit (EMU) for the National Aeronautics and Space Administration’s (NASA’s) Artemis program to return astronauts to the lunar surface. This new suit will allow for increased range of motion compared the current EMU and Apollo era suits and will have additional features that will enhance the health and safety of exploration. With the design of lunar missions and the xEVAS progressing, it is important to consider possible injuries and injury mechanisms that could occur in the suit. To address these concerns, the suited Injury Modes and Effects Analysis (IMEA) was developed to outline suited injury scenarios and rank them based on risk score. The IMEA documents possible scenarios and underlying mechanisms of injury while wearing an extravehicular activity (EVA) suit. Tasks during lunar surface EVA as well as training events to prepare for lunar missions were considered as history has shown that more suit injuries occur during training than in flight. Each scenario is ranked with a consequence and likelihood scoring based on our current understanding of the suit and Artemis design reference missions to identify high-risk cases that will drive further work in suited injury. Injuries, mechanisms of injury, and mitigation strategies are evaluated within each scenario. The Suited Injury Summit was held on January 5, 2022, to vet the IMEA with external experts. This was an all-day virtual meeting with the suited injury team, ergonomists, suit engineers, safety engineers, the flight operations directorate, flight doctors, astronauts, astronaut strength, conditioning, and rehabilitation specialists (ASCRS), and external subject matter experts (SMEs). External SMEs consisted of surgeons with varying specialties. The intent of this meeting was to walk through the top injury risks identified in the analysis, identify any gaps that were not captured, and discuss mitigations. With participation from all groups, countless lessons-learned came from the Summit meeting. Using the lessons-learned and discussion from the Summit, the top 10 risks have been identified: neutral buoyancy laboratory training, hand/glove injuries, poor suit fit, field training, specific EVA tasks/design of task, boots/ankle injuries, falls from heights, background radiation, repetitive contact, and ambulation/long-distance ambulation. Mitigation steps have also been determined for each of the top risks. The IMEA and documentation of top risks is a living document. Yearly meetings are planned to update the analysis and reevaluate top risks and mitigations. The IMEA is being used to drive work in suited injury, and this work will continue to evolve with IMEA and lunar mission updates.

Tessa Reiber↗

Development of the Suited Injury Modes and Effects Analysis for Identification of Top Injury Risks in Lunar Missions and Training

A new Exploration Extravehicular Activity Services (xEVAS) suit is being designed to replace the current Extravehicular Mobility Unit (EMU) for the National Aeronautics and Space Administration’s (NASA’s) Artemis program to return astronauts to the lunar surface. This new suit will allow for increased range of motion compared to the current EMU and Apollo era suits and additional features will enhance the health and safety of exploration. With the design of lunar missions and the xEVAS suit progressing, it is important to consider possible injuries and injury mechanisms that could occur in the suit. To address these concerns, the suited Injury Modes and Effects Analysis (IMEA) was developed to outline suited injury scenarios and rank them based on risk score. The IMEA documents possible scenarios and underlying mechanisms of injury. History has shown that more suit injuries occur during training than in flight; therefore, currently planned training events to prepare for lunar missions and tasks during lunar surface EVAs were considered. Each scenario is ranked with likelihood and consequence scorings based on our current understanding of suit and application of Artemis design reference missions. The scoring allowed identification of the high-risk cases that will drive further work in suited injury. Mechanisms of injury, injury outcomes, and mitigation strategies are evaluated within each scenario. The Suited Injury Summit was held on January 5, 2022, to vet the IMEA with external experts. This was an all-day virtual meeting with the suited injury team; ergonomists; suit engineers; safety engineers; the flight operations directorate; flight doctors; astronauts; astronaut strength, conditioning, and rehabilitation specialists (ASCRS); and external subject matter experts (SMEs). External SMEs consisted of surgeons with varying specialties. The intent of this meeting was to walk through the top injury risks identified in the analysis, identify any gaps that were not captured, and discuss mitigations. With participation from all groups, countless lessons-learned came from the Summit meeting. Using these, the top 10 risks have been identified: neutral buoyancy laboratory training, hand/glove injuries, poor suit fit, field training, specific EVA tasks/design of task, boots/ankle injuries, falls from heights, background radiation, repetitive contact, and ambulation/longdistance ambulation. Mitigation steps have also been determined for each of the top risks. The IMEA and documentation of top risks is a living document. Yearly meetings are planned to update the analysis and reevaluate top risks and mitigations. The IMEA is being used to drive work in suited injury, and this work will continue to evolve with IMEA and lunar mission updates.

Teresa Reiber↗

Evidence-Based Approach to the Analysis of Serious Decompression Sickness with Application to EVA Astronauts

It is important to understand the risk of serious hypobaric decompression sickness (DCS) in order to develop procedures and treatment responses to mitigate the risk. Since it is not ethical to conduct prospective tests about serious DCS with humans, the necessary information was gathered from 73 published reports. We hypothesize that a 4-hr 100% oxygen (O2) prebreathe results in a very low risk of serious DCS, and test this through analysis. We evaluated 258 tests containing information from 79,366 exposures in attitude chambers. Serious DCS was documented in 918 men during the tests. Serious DCS are signs and symptoms broadly classified as Type II DCS. A risk function analysis with maximum likelihood optimization was performed to identify significant explanatory variables, and to create a predictive model for the probability of serious DCS [P(serious DCS)]. Useful variables were Tissue Ratio, the planned time spent at altitude (T(sub alt)), and whether or not repetitive exercise was performed at altitude. Tissue Ratio is P1N2/P2, where P1N2 is calculated nitrogen (N2) pressure in a compartment with a 180-min half-time for N2 pressure just before ascent, and P2 is ambient pressure after ascent. A prebreathe and decompression profile Shuttle astronauts use for extravehicular activity (EVA) includes a 4-hr prebreathe with 100% O2, an ascent to P2 = 4.3 lb per sq. in. absolute, and a T(sub alt) = 6 hr. The P(serious DCS) is: 0.0014 (0.00096 - 0.00196, 95% confidence interval) with exercise and 0.00025 (0.00016 - 0.00035) without exercise. Given 100 Shuttle EVAs to date and no report of serious DCS, the true risk is less than 0.03 with 95% confidence (Binomial Theorem). It is problematic to estimate the risk of serious DCS since it appears infrequently, even if the estimate is based on thousands of altitude chamber exposures. The true risk to astronauts may lie between the extremes of the confidence intervals (0.00016 - 0.00196) since the contribution of other factors, particularly exercise, to the risk of serious DCS during EVA is unknown. A simple model that only accounts for four important variables in retrospective data is still helpful to increase our understanding about the risk of serious DCS.

Conkin, Johnny↗

Task 12 PV Sustainability - Human Health Risk Assessment Methods for PV, Part 3: Module Disposal Risks

End-of-life management is important for addressing large future photovoltaic (PV) waste volumes and conserving raw materials for use in new PV modules. In regions without regulatory mandates for PV recycling, end-of-life PV modules can be disposed in accordance with general waste laws. Given the use of various metals as raw materials in semiconductor compounds and electrical contacts in commercial PV modules, some stakeholders have raised concerns regarding potential environmental impacts if PV modules are subject to improper disposal instead of being recycled or disposed in sanitary landfills, as is required in most world regions. To evaluate these concerns, screening-level risk assessment methods are developed herein that evaluate potential human health risks from groundwater and surface (air, soil, surface water) exposure pathways. The methods estimate potential impacts from disposal of end-of-life (EOL) PV modules in non-sanitary landfills under the following worst-case conditions: no leachate collection or groundwater monitoring, no liner for preventing leachate migration, uncovered waste, and lack of stormwater management. Examining worst-case conditions allows the exploration of maximum potential risk to attempt to ensure disposal does not increase health risk above regulatory thresholds. Specifically, this report presents an analysis of potential human health risks associated with non-sanitary landfill disposal for three PV technologies, focusing on release of the highest-prioritized chemical element for each: lead (Pb) in crystalline-silicon (c-Si) PV modules, cadmium (Cd) in thin film cadmium telluride (CdTe) PV modules, and selenium (Se) in thin film copper indium selenide (CIS) PV modules. The prioritization of these chemical elements for analysis is based on stakeholder interest. Because the methodology is chemical-specific, the risk assessment results for these chemicals cannot be directly generalized to other chemicals, although the risk assessment methodology can be applied to other chemicals. If the chemicals chosen are indeed the ones presenting greatest risk, then the results herein should represent the upper bound of health risk from exposure to a single constituent.

14 SOLAR ENERGY↗

Systems Engineering and Integration (SE and I)

The issue of technology advancement and future space transportation vehicles is addressed. The challenge is to develop systems which can be evolved and improved in small incremental steps where each increment reduces present cost, improves, reliability, or does neither but sets the stage for a second incremental upgrade that does. Future requirements are interface standards for commercial off the shelf products to aid in the development of integrated facilities; enhanced automated code generation system slightly coupled to specification and design documentation; modeling tools that support data flow analysis; and shared project data bases consisting of technical characteristics cast information, measurement parameters, and reusable software programs. Topics addressed include: advanced avionics development strategy; risk analysis and management; tool quality management; low cost avionics; cost estimation and benefits; computer aided software engineering; computer systems and software safety; system testability; and advanced avionics laboratories - and rapid prototyping. This presentation is represented by viewgraphs only.

Chevers, ED↗

Dynamic PRA-Based Estimation of PWR Coping Time Using a Surrogate Model for Accident Tolerant Fuel

In this study, we propose an interpolation-based response surface surrogate methodology to manage a large number of scenarios in dynamic probabilistic risk assessment. It adopts the shape Dynamic Time Warping algorithm to cluster the interpolation neighborhood from time series sample data. The interpolation method was adapted from Taylor Kriging to allow a reduced-order model of the Taylor series. In order to demonstrate its applicability to complex issues in risk assessment for nuclear engineering, an example risk response surface to estimate emergency core cooling system (ECCS) criteria for triplex silicon carbide (SiC) accident-tolerant fuel was constructed. The response surface was exploited to estimate the cumulative failure probability of the fuel cladding structure due to the uncertainties in operator actions and safety systems. The functional failures were assessed based on a combination of individual layer failures computed by coupling Risk Analysis Virtual Environment software with a pressurized water reactor 1000-MW(electric) RELAP5 model and the in-house fuel performance assessment module. Results showed that SiC cladding failure probability spiked less than 1 min after a large-break loss-of- coolant accident whenever the current ECCS criteria for Zircaloy-4 (Zr-4) cladding was used. However, it still provides an increased safety margin of three orders of magnitude compared to Zr-4. This positive margin could be utilized to relax active ECCS requirements by allowing deviations of up to 450 s in its actuation time. The proposed surrogate methodology generated a response surface of SiC cladding failure probability reasonably well, with a significant savings of computation time. This methodology is expected to be useful in the analysis of system response with complex uncertainty sources.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Modelling the Risks Remotely Piloted Aircraft Pose to People on the Ground

Worldwide there is much e ort being directed towards the development of a framework of air- worthiness regulations for remotely piloted aircraft systems (RPAS). It is now broadly accepted that regulations should have a strong foundation in, and traceability to, the management of the safety risks. Existing risk models for RPAS operations do not provide a simple means for incorporating the wide range of technical and operational controls into the risk analysis and evaluation processes. This paper describes a new approach for modelling and evaluating the risks associated with RPAS operations near populous areas based on the barrier bow tie (BBT) model. A BBT model is used to structure the underlying risk management problem. The model focuses risk analysis, evaluation, and decision making activities on the devices, people, and processes that can be employed to reduce risk. The BBT model and a comprehensive set of example risk controls are presented. The general model can be applied to any RPAS operation. The foundations for quantitative and qualitative assessments using a BBT model are also presented. The modelling and evaluation framework is illustrated through its application to a case-study rotary wing RPAS for two operational scenarios. The model can be used as a basis for determining airworthiness certification requirements for RPAS.

Barrier bow tie model↗

Instrument Modeling Concepts for Tradespace Analysis of Satellite Constellations

Constellations are gaining popularity in government and commercial space-based missions for Earth Observation (EO) due to their risk tolerance and ability to improve observation sampling in space and time. NASA Goddard Space Flight Center (GSFC) is developing a pre-Phase A tool called Tradespace Analysis Tool for Constellations (TAT-C) to initiate constellation mission design. The tool will allow users to explore the tradespace between various performance, cost and risk metrics (as a function of their science mission) and select Pareto optimal architectures that meet their requirements. This paper will describe the concept of modeling the primary science instruments within TAT-C, using a radar as an example, but extendable to imagers, occulters and lidars. The modularity of TAT-C's software architecture allows for crisply defining the interface between TAT-C's user defined or internal variables and the payload variables. The described module will inform TAT-C users of payload-dependent performance differences among thousands of constellation architectures (e.g. revisit time of the sensor swath, differential signal to noise ratio (SNR), spatial resolution of measurements) and allow them to pick an appropriate constellation architecture for detailed development. The module may also inform operational decisions of satellite modes, based on ground optimization or onboard autonomy.

Nag, Sreeja↗

Analyzing Potential Failures and Effects in a Pilot-Scale Biomass Preprocessing Facility for Improved Reliability

This study demonstrates a failure identification methodology applied to a preprocessing facility generating conversion-ready feedstocks from biomass meeting conversion process critical quality attribute (CQA) specifications. Failure Modes and Effects Analysis (FMEA) was used as an industrially relevant risk analysis approach to evaluate a logging residue preprocessing system to prepare feedstock for pyrolysis conversion. Risk evaluations considered both system-level and operation unit-level assessments considering process efficiency, product quality, cost, sustainability, and safety. Key outputs included estimations of semi-quantitative risk scores for each failure, identification of the failure impacts, identification of failure causes associated with material attributes and process parameters, ranking success rates of failure detection methods, and speculation of potential mitigation strategies for decreasing failure risk scores. Results showed that deviations from moisture specifications had cascading consequences for other CQAs along with process safety implications. Failures linked to fixed carbon specifications carried the highest risk scores for product quality and process efficiency impacts. As increased throughput can be inversely related to meeting product quality specifications; achieving throughput and other material-based CQAs simultaneously will likely require system optimization or prioritization based on system economics. Ultimately, this work successfully demonstrates FMEA as a risk analysis approach for other bioenergy process systems.

09 BIOMASS FUELS↗

An improved approach for flight readiness certification: Methodology for failure risk assessment and application examples, volume 1

An improved methodology for quantitatively evaluating failure risk of spaceflight systems to assess flight readiness and identify risk control measures is presented. This methodology, called Probabilistic Failure Assessment (PFA), combines operating experience from tests and flights with engineering analysis to estimate failure risk. The PFA methodology is of particular value when information on which to base an assessment of failure risk, including test experience and knowledge of parameters used in engineering analyses of failure phenomena, is expensive or difficult to acquire. The PFA methodology is a prescribed statistical structure in which engineering analysis models that characterize failure phenomena are used conjointly with uncertainties about analysis parameters and/or modeling accuracy to estimate failure probability distributions for specific failure modes. These distributions can then be modified, by means of statistical procedures of the PFA methodology, to reflect any test or flight experience. Conventional engineering analysis models currently employed for design of failure prediction are used in this methodology. The PFA methodology is described and examples of its application are presented. Conventional approaches to failure risk evaluation for spaceflight systems are discussed, and the rationale for the approach taken in the PFA methodology is presented. The statistical methods, engineering models, and computer software used in fatigue failure mode applications are thoroughly documented.

Moore, N. R.↗

An improved approach for flight readiness certification: Methodology for failure risk assessment and application examples. Volume 2: Software documentation

An improved methodology for quantitatively evaluating failure risk of spaceflight systems to assess flight readiness and identify risk control measures is presented. This methodology, called Probabilistic Failure Assessment (PFA), combines operating experience from tests and flights with engineering analysis to estimate failure risk. The PFA methodology is of particular value when information on which to base an assessment of failure risk, including test experience and knowledge of parameters used in engineering analyses of failure phenomena, is expensive or difficult to acquire. The PFA methodology is a prescribed statistical structure in which engineering analysis models that characterize failure phenomena are used conjointly with uncertainties about analysis parameters and/or modeling accuracy to estimate failure probability distributions for specific failure modes, These distributions can then be modified, by means of statistical procedures of the PFA methodology, to reflect any test or flight experience. Conventional engineering analysis models currently employed for design of failure prediction are used in this methodology. The PFA methodology is described and examples of its application are presented. Conventional approaches to failure risk evaluation for spaceflight systems are discussed, and the rationale for the approach taken in the PFA methodology is presented. The statistical methods, engineering models, and computer software used in fatigue failure mode applications are thoroughly documented.

Moore, N. R.↗

An improved approach for flight readiness certification: Methodology for failure risk assessment and application examples. Volume 3: Structure and listing of programs

An improved methodology for quantitatively evaluating failure risk of spaceflight systems to assess flight readiness and identify risk control measures is presented. This methodology, called Probabilistic Failure Assessment (PFA), combines operating experience from tests and flights with engineering analysis to estimate failure risk. The PFA methodology is of particular value when information on which to base an assessment of failure risk, including test experience and knowledge of parameters used in engineering analyses of failure phenomena, is expensive or difficult to acquire. The PFA methodology is a prescribed statistical structure in which engineering analysis models that characterize failure phenomena are used conjointly with uncertainties about analysis parameters and/or modeling accuracy to estimate failure probability distributions for specific failure modes. These distributions can then be modified, by means of statistical procedures of the PFA methodology, to reflect any test or flight experience. Conventional engineering analysis models currently employed for design of failure prediction are used in this methodology. The PFA methodology is described and examples of its application are presented. Conventional approaches to failure risk evaluation for spaceflight systems are discussed, and the rationale for the approach taken in the PFA methodology is presented. The statistical methods, engineering models, and computer software used in fatigue failure mode applications are thoroughly documented.

Moore, N. R.↗

An Analysis of Risk and Function Information in Early Stage Design

The concept of function offers a high potential for thinking and reasoning about designs as well as providing a common thread for relating together other design information. This paper focuses specifically on the relation between function and risk by examining how this information is addressed for a design team conducting early stage design for space missions. Risk information is decomposed into a set of key attributes which are then used to scrutinize the risk information using three approaches from the pragmatics sub-field of linguistics: i) Gricean, ii) Relevance Theory, and Functional Analysis. Results of this linguistics-based approach descriptively account for the context of designer communication with respect to function and risk, and offer prescriptive guidelines for improving designer communication.

Barrientos, Francesca↗

Electrical Substation Configuration Effect on Substation Reliability

The nation’s electrical grid must be reliable because of its critical role in the economy, defense, and security of the nation. Many common tasks and industrial operations rely on proper electrical power distribution. In the design of new bus systems or evaluation of existing bus systems, the type of bus configuration affects the risk, reliability, maintenance, and cost of the system. This work utilizes Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE) to perform a probabilistic risk assessment (PRA) based sensitivity study on the reliability of substations with differing bus configurations. This study examines single bus, main and transfer, breaker and a half, double bus/double breaker, and ring bus configurations applied to busses of varying number of lines. The case variances, methods, and rankings presented can provide a guide for bus configuration for future electrical grid design and analysis.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Development of NASA's Accident Precursor Analysis Process Through Application on the Space Shuttle Orbiter

Accident Precursor Analysis (APA) serves as the bridge between existing risk modeling activities, which are often based on historical or generic failure statistics, and system anomalies, which provide crucial information about the failure mechanisms that are actually operative in the system. APA docs more than simply track experience: it systematically evaluates experience, looking for under-appreciated risks that may warrant changes to design or operational practice. This paper presents the pilot application of the NASA APA process to Space Shuttle Orbiter systems. In this effort, the working sessions conducted at Johnson Space Center (JSC) piloted the APA process developed by Information Systems Laboratories (ISL) over the last two years under the auspices of NASA's Office of Safety & Mission Assurance, with the assistance of the Safety & Mission Assurance (S&MA) Shuttle & Exploration Analysis Branch. This process is built around facilitated working sessions involving diverse system experts. One important aspect of this particular APA process is its focus on understanding the physical mechanism responsible for an operational anomaly, followed by evaluation of the risk significance of the observed anomaly as well as consideration of generalizations of the underlying mechanism to other contexts. Model completeness will probably always be an issue, but this process tries to leverage operating experience to the extent possible in order to address completeness issues before a catastrophe occurs.

Maggio, Gaspare↗