Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

Distributed Wind Certification Best Practices Guideline: January 16, 2023 - January 15, 2026

This Distributed Wind (DW) Certification Best Practices Guideline describes the typical approach for certification of distributed wind turbines above and below 150 kilowatts (kW) in size based on the conformity assessment requirements in the United States. The purpose of the guideline is to clarify and consistently describe the path to certification for various systems and components by helping the user navigate the complex path to certification compliance. This is done via clarification of both the required turbine type certification elements, as well as third-party electrical safety listing of turbine system components and subassemblies. In the United States specifically, there is no wind turbine certification scheme that governs or maintains a consistent set of conformity assessment requirements, and this can lead to wide ranging interpretations of the standards and required elements for certifications. This guideline attempts to simplify the path by organizing the information and guiding the user to the applicable set of requirements. Any wind turbine manufacturer or designer of wind turbines used in distributed generation applications in the United States would find value in the conformity assessment guidance in this guideline. Users are expected to be involved in the technical development of the product and supporting documentation, as the details provided are geared towards electrical and mechanical engineering of the system and components.

17 WIND ENERGY↗

FY2022 Filter Test for TRU Waste Drum Prototype Unit

Continuing last year’s (fiscal year 2021) work, a prototype instrument and an NPI-6 Integrated Work Document (IWD) were developed to assess the functionality of filters on transuranic waste containers (commonly called 55 Gallon ring-top drums) without requiring the removal of the drum lid. The purpose of this work is to determine the air flow and pressure characteristics associated with filter clogging, filter pressure drop at a fixed flow rate, and leakage around the lid seal. The FY22 objectives included: (A) Development of prototype device, (B) Drafting an IWD document, (C) Defining a filter clogging parameter, (D) Assessing filter damage due to over-pressure events, and (E) A path forward to obtain approval of the system safety filters in compliance with P101-16 Industrial Ventilation – non HVACR (LANL 2022).

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Estimation of radiation fields generated by injected beam losses at the EIC's RCS

This technical note provides a general estimate of radiation fields generated by injection fault events at the electron-ion collider´s (EIC) Rapid Cycling Synchrotron (RCS), calculated with the Monte Carlo particle transport and interaction code FLUKA. Calculations were performed for two major injection loss scenarios that involve iron targets and featured different electron beam energy and current values. The results presented here constitute a first order assessment of several radiological quantities associated with these electromagnetic showers and their potential effect on environmental safety and health (ESH) systems in the vicinity of injection areas.

43 PARTICLE ACCELERATORS↗

Common Cause Failure Evaluation of High Safety Significant Safety-related Digital Instrumentation and Control Systems using IRADIC Technology

Digital instrumentation and control (DI&C) systems in nuclear power plants (NPPs) have many advantages over analog systems but also pose different engineering and technical challenges, such as potential threats due to common cause failures (CCFs). This paper proposes an integrated risk assessment technology for DI&C systems (IRADIC) developed by Idaho National Laboratory for dealing with potential software CCFs in DI&C systems of NPPs. The methodology development of the IRADIC technology on the quantitative evaluation of software CCFs in high safety-significant safety-related DI&C systems in NPPs is illustrated in this paper. In IRADIC, qualitative hazard analysis and quantitative reliability and consequence analysis are successively implemented to obtain quantitative risk information, compare with respective risk evaluation acceptance criteria, and provide suggestions for risk reduction and design optimization. A comprehensive case study was also performed and documented in this paper. Results show that the IRADIC technology can effectively identify potential digital-based CCFs, estimate their failure probabilities, and evaluate their impacts to system and plant safety.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Technical Assessment of Off-Gas System Technologies for Potential Use in Molten Salt Reactors

Molten salt reactors (MSRs) are a class of Generation IV advanced reactor technologies aimed to enhance and improve the safety, fuel utilization and cost-effectiveness of nuclear power generation. MSR concepts are based on using a molten salt mixture as a primary nuclear reactor coolant, while the fuel can be either directly dissolved in the coolant (i.e., fluid-fueled) or can be in a separate solid form (i.e., salt-cooled solid-fueled). MSRs can be operated in either thermal or fast neutron spectra, as simple fissile convertors, or breeder reactors (e.g., utilizing both fissile and fertile fuels), as well as accelerator-driven sub-critical reactors or transuranic element burners. Operation of MSRs will necessitate management and treatment of the off-gas streams released to the headspace of the reactor where, in some designs, a cover gas can be circulated to remove certain fission products and maintain an inert atmosphere. An inert MSR cover gas swept over or sparged into the salt will confine radionuclides emerging from the free surface, including radioactive noble and non-noble gases, aerosols, and volatile species. The elements and compounds of these species will have a wide range of thermochemical and physical properties, some of which will decay to different products in the off-gas stream. Therefore, system components used to manage and treat MSR off-gas streams will need to be robust under dynamic reactor and chemistry conditions to support adequate reactor performance by managing the composition and species in the salt coolant and cover gas space. Off-gas system components would perform as a radionuclide boundary to the reactor vessel and a primary means for preventing radionuclide release; therefore, they are of high safety significance for MSR operations. This report reviews various technologies and materials for potential implementation in the design of an MSR off-gas system per a general conceptual framework. The reviewed technologies operate based on scrubbing, capture, delay, or separation of species in the off-gas stream. These include molten hydroxide scrubbers, solid sorbents, delay off-gas systems, particle traps, and cryogenic distillation. Since aspects of an off-gas system will be design-specific, the approach is to provide general discussions on attributes of these technologies and materials, including target off-gas stream species, operational parameters and conditions of importance to decontamination factors, implementation maturity, system component monitoring, potential off-normal conditions and considerations for waste products. The information aims to support the U.S. Nuclear Regulatory Commission in their safety evaluations for MSR designs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

LANSCE Facility Longevity Assessment

This LANSCE Facility Longevity Assessment examined 34 total systems critical to the operation of the LANSCE accelerator complex. These systems are primarily owned, operated, and maintained by AOT Division. Based on the criteria used in this assessment, there are 12 AOT Division systems that are potential high risk as related to longterm LANSCE operations. These systems may also impact the success of LAMP. Also summarized in this report are the facility activities planned over the next decade. These include general facility maintenance and infrastructure upgrades, as well as planned electrical system upgrades. The LANSCE Facility Operations (LFO) Division is responsible for this activity scope and budget planning. Most of the planned activities are general in nature and should have little impact on accelerator operations or LAMP activities as currently envisioned. However, close coordination with between AOT, LFO, and LAMP would be prudent. A next step should be to develop an actionable plan to address the high-risk systems. Potential criteria for developing such a plan could include: (1) Evaluating the global impact of the system (operations, program, safety, etc.), (2) Ranking by impact (ranked now by risk), (3) Estimating cost to implement the corrective actions (Is there already a plan or not?), and (4) Estimating the time required for corrective actions. An alternative could include integration of the assessment data into both the Asset Management System and the Maintenance Analytics Risk Register.

43 PARTICLE ACCELERATORS↗

Hydrogen Risk Assessment Models (HyRAM) (Version 3.0 Technical Reference Manual)

The HyRAM software toolkit provides a basis for conducting quantitative risk assessment and consequence modeling for hydrogen infrastructure and transportation systems. HyRAM is designed to facilitate the use of state-of-the-art science and engineering models to conduct robust, repeatable assessments of hydrogen safety, hazards, and risk. HyRAM includes generic probabilities for hydrogen equipment failures, probabilistic models for the impact of heat flux on humans and structures, and computationally and experimentally validated first-order models of hydrogen release and flame physics. HyRAM integrates deterministic and probabilistic models for quantifying accident scenarios, predicting physical effects, and characterizing hydrogen hazards (thermal effects from jet fires, overpressure effects from deflagrations), and assessing impact on people and structures. HyRAM is developed at Sandia National Laboratories for the U.S. Department of Energy to increase access to technical data about hydrogen safety and to enable the use of that data to support development and revision of national and international codes and standards. HyRAM is a research software in active development and thus the models and data may change. This report will be updated at appropriate developmental intervals. This document provides a description of the methodology and models contained in the HyRAM version 3.0. HyRAM 3.0 includes the new ability to model cryogenic hydrogen releases from liquid hydrogen systems, using a different property calculation method and different equations of state. Other changes include modifications to the ignition probability calculations, component leak frequency calculations, and addition of default impulse data.

08 HYDROGEN↗

Complete Performance Comparison Between the Optimized Image Construction Algorithm (U-MBIR) and the Existing Reconstruction Algorithm for Detecting Defects and Damage in Concrete

Reinforced concrete (RC) is a composite material subjected to mechanical, thermal, and chemical loads throughout its service life. Because of these external stressors and the susceptibility of RC structural members to shrinkage and microcracking, the material degrades throughout its life cycle. This deterioration can lead to a decrease in member capacity and, ultimately, poses a threat to the structural integrity. Thus, it is crucial that the damage caused by aging and degradation be monitored and assessed at regular intervals throughout the material’s service life. Since coring of the material is typically not feasible for in-service structural systems, non-destructive evaluation (NDE) methodologies are used to assess remaining structural capacity. NDE methods enable surface and subsurface examination without damaging or degrading the medium. Moreover, RC is a critical component of nuclear power plants; thus, its safety and reliability must be thoroughly examined throughout the life cycle of the structural system. Ultrasonic measurements have been an industry standard for both surface and subsurface inspections. To this end, Oak Ridge National Laboratory (ORNL) has researched and developed advanced image reconstruction algorithms to capture internal damage. The results and discussion presented herein summarize the current state of the ultrasonic model–based iterative reconstruction (U-MBIR) algorithm developed at ORNL. More specifically, this report presents a comparison between reconstruction images produced via a widely employed ultrasonic NDE technique—the synthetic aperture focusing technique (SAFT)—and the ORNL-developed U-MBIR algorithm. These NDE methodologies are demonstrated using ultrasonic data collected from four concrete specimens. Overall, the U-MBIR algorithm eliminates artifacts and noise that are typically present within the SAFT reconstructions, and it shows defects and anomalies more clearly than the SAFT images. In conclusion, this algorithm is suitable for identifying concrete defects, although more improvements and optimization could be done to better define internal defects.

36 MATERIALS SCIENCE↗

The Analysis and Support for LANL Technology Testbed: High Altitude Balloon Gondola and Orion Eagle Gamma Ray Detection Instrument

The Analysis and Support for LANL Technology Testbed: High Altitude Balloon Gondola and Orion Eagle Gamma-Ray Detection Instrument is a project where Los Alamos National Laboratory (LANL), in conjunction with the University of Michigan, are looking into gamma-ray detection in a space-like environment. The purpose of the detection is to work on instruments that can assist with planetary exploration and nuclear deterrents using a High-Altitude Balloon (HAB). For this paper, the main focus is on the mechanical aspects related to the structural analysis of the gondola. It is vital to understand the structural analysis because it helps determine if the gondola can survive the changes in the environment and the different forces or shocks that it will experience when the parachute is deployed and at landing. Additionally, NASA's Balloon Program Office (BPO) has specific requirements to meet to achieve flight certifications. Part of those certifications requires the gondola to simulate different scenarios at specific conditions with various forces applied and orientations. Therefore, it is necessary to adjust the calculations of each method and the force applied to get the right results. Once that is done, the information is inputted into the structural analysis modeling system. The system will aid the mechanical team in assessing the conditions of the gondola at each scenario and determine its margin of safety. After the gondola and instrument are certified, the payload will be able to fly. The HAB and payload are launched from NASA's Columbia Scientific Balloon Facility (CSBF) at Fort Sumner, NM. The official flight was on September 26th, 2021.

42 ENGINEERING↗

Hydrogen Plus Other Alternative Fuels Risk Assessment Models (HyRAM+) Version 5.0 Technical Reference Manual

The HyRAM+ software toolkit provides a basis for conducting quantitative risk assessment and consequence modeling for hydrogen, natural gas, and autogas systems. HyRAM+ is designed to facilitate the use of state-of-the-art models to conduct robust, repeatable assessments of safety, hazards, and risk. HyRAM+ integrates deterministic and probabilistic models for quantifying leak sizes and rates, predicting physical effects, characterizing hazards (thermal effects from jet fires, overpressure effects from delayed ignition), and assessing impacts on people. HyRAM+ is developed at Sandia National Laboratories to support the development and revision of national and international codes and standards, and to provide developed models in a publicly-accessible toolkit usable by all stakeholders. This document provides a description of the methodology and models contained in HyRAM+ version 5.0. The most significant change for HyRAM+ version 5.0 from HyRAM+ version 4.1 is the ability to model blends of different fuels. HyRAM+ was previously only suitable for use with hydrogen, methane, or propane, with users having the ability to use methane as a proxy for natural gas and propane as a proxy for autogas/liquefied petroleum gas. In version 5.0, real natural gas or autogas compositions can be modeled as the fuel, or even blends of natural gas with hydrogen. These blends can be used in the standalone physics models, but not yet in the quantitative risk assessment mode of HyRAM+.

03 NATURAL GAS↗

Hydrogen Plus Other Alternative Fuels Risk Assessment Models (HyRAM+) Version 5.1 Technical Reference Manual

The HyRAM+ software toolkit provides a basis for conducting quantitative risk assessment and consequence modeling for hydrogen, natural gas, and autogas systems. HyRAM+ is designed to facilitate the use of state-of-the-art models to conduct robust, repeatable assessments of safety, hazards, and risk. HyRAM+ integrates deterministic and probabilistic models for quantifying leak sizes and rates, predicting physical effects, characterizing hazards (thermal effects from jet fires, overpressure effects from delayed ignition), and assessing impacts on people. HyRAM+ is developed at Sandia National Laboratories to support the development and revision of national and international codes and standards, and to provide developed models in a publicly-accessible toolkit usable by all stakeholders. This document provides a description of the methodology and models contained in HyRAM+ version 5.1. The most significant changes for HyRAM+ version 5.1 from HyRAM+ version 5.0 are updated default leak frequency values for propane, new default component counts for different fuel types, and an improved fuel specification view in the graphical user interface.

02 PETROLEUM↗

A Bayesian and HRA-Aided Method for the Novel Reliability Analysis of Software

Technological advancements and nuclear power plant modernization has inspired considerable research in the areas of safety and reliability, yet there remains a lack of consensus for the reliability assessment of digital instrumentation and control (I&C) systems. Motivated by the lack of consensus for reliability analysis methods, this work employs a novel framework that incorporates Bayesian, human reliability, and common-cause failure (CCF) modeling techniques. The novel framework allows the use of state-of-the-art or classical modeling techniques when accounting for human and CCF effects on system reliability. The Bayesian and HRA-Aided Method for the Reliability Analysis of Software (BAHAMAS) is demonstrated by a case study for the quantification of software hazards found in a previous analysis of a digital reactor trip system. The results demonstrate the ability of BAHAMAS to account for human activities during the software development life cycle and their influence on software reliability. BAHAMAS is a flexible tool for extending the coverage of conventional probabilistic risk assessments to include modernized digital I&C systems.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

The Meaning of Risk for Safety, Security, and Safeguards in the Design of Advanced Nuclear Reactors

What is the meaning of risk as it applies to the design of advanced reactors in the disciplines of safety, security, and safeguards? How can we find common terminology for the concept of risk and how can we find interfaces between these disciplines? These are important questions that should be explored in order that they may be applied in an integrated manner for the most effective and efficient design approaches. Eliminating or minimizing risks is a key design driver that motivates and informs the development of nuclear reactors. For safety, risk is well understood and applied in Probabilistic Risk Assessments. For security, the risk-based concepts of vulnerability assessments and vital areas are all considered in designing security systems. For safeguards, the concept of risk is not formally defined, as it relates to the design and operation of nuclear reactors. International nuclear safeguards seek to reduce the risk of proliferation in the nuclear fuel cycle and as such the concept of risk does exist. Therefore, the current understanding of the “3S’ approach, which seeks to find the interfaces and conflicts between safety, security, and safeguards requires a thorough understanding of the role that the reduction of risk plays in all three disciplines. The intersection of risk for safety and security is now being developed as there is a strong correlation between reactor design and operations and their vulnerability to sabotage. The intersection of risk for security and safeguards has to date chiefly been focused on the nuclear material control and accounting systems, which are relied on by both the operator (State) and the IAEA. This paper explores the concept of risk in each of the three disciplines, how they interact, potential conflicts and interfaces , how these might be addressed and leveraged, and a notional framework for how this could be achieved.

Kovacic, Donald N↗

Requirements and Conceptual Design of Off-gas Systems for the Reprocessing of Metallic Fuels

An assessment has been conducted to determine how key regulations regarding volatile radionuclide emissions to the atmosphere may apply to the off-gas streams associated with electrochemical reprocessing. The scope of this assessment was based upon a generic electrochemical reprocessing scheme with a throughput rate of 200 MTIHM/y applied to metallic fuel discharged from a sodium fast reactor (SFR), but the findings are able to be translated to other advanced nuclear scenarios as merited. Air dispersion modeling was performed using the EPA CAP-88 model and evaluated the uncontrolled decontamination factors (DFs) that would be required to achieve regulatory compliance with the dose-based limits set forth by EPA regulation 40 CFR 190.10(a). These DFs were compared to those required by fuel cycle–based limits set forth by EPA regulation 40 CFR 190.10(b). Two theoretical sites with disparate climatological conditions were selected for air dispersion modeling (Idaho and Tennessee). The radionuclides modeled included 3 H, 85 Kr, 129 I, and selected alpha-emitting transuranic isotopes (referred to here as 239 Pu-TRU <1y ). It was found that the fuel cycle-based limits in 40 CFR 190.10(b) are most restrictive for 85 Kr and 239 Pu-TRU <1y , with DFs of 3 and 6.1E+09, respectively. The dose-based limit as derived from 40 CFR 190.10(a) could require mitigation of tritium in some scenarios, with an estimated DF of about 3 for the reference scenarios. The fuel cycle-based limit for 129 I resulted in a DF of about 240 for the reference scenario. The need for iodine mitigation based on dose to the public depended upon the physical form of iodine as either particulate or vapor-phase species. Emission of iodine from the facility as a vapor necessitated DFs of about 2 but emission as a particulate would require DFs >6,000 to meet thyroid dose-based limits. Effects of physical form on needed iodine mitigation are significant, but the understanding of speciation of iodine both during electrochemical reprocessing and after release to the atmosphere is limited. The electrochemical processing unit operations were evaluated to identify potential release points for the volatile radionuclides and to assess the potential for retention of the radionuclides within the process (thus decreasing the need for mitigation). Mitigation strategies for 3 H, 85 Kr, 129 I, and 239 Pu-TRU <1y were identified. In all cases, there are reasonably achievable pathways to regulatory compliance, although in some cases additional R&D is merited to verify the chemical speciation of these isotopes and to develop and demonstrate potential treatment technologies for this application. Whether or not additional off-gas controls (beyond common operations such as HEPA filtration and oxygen and moisture control) are needed for any of these regulated or volatile radionuclides depends on the (a) type of facility (NRC-regulated or DOE), (b) used fuel process rate, (c) used fuel burnup and composition, (d) speciation and retention of volatile radionuclides in the process and in the cell gas cleanup system, (e) site-specific parameters such as location, meteorology, stack height, and site boundaries, and (f) levels of conservatism and safety factors used in assessing compliance to air emissions regulations. Performance of this assessment revealed several areas where information is lacking or additional research is required in order to better determine if or what kinds of off-gas control might be needed. First, and most significantly, the understanding of the chemical speciation and physical form and partitioning of iodine during electrochemical processing operations is lacking and prevents the ability to accurately assess the potential iodine mitigation requirements. Future research in this area should be multifaceted and include thermodynamic modeling of iodine speciation in different process steps, experiments to quantify the kinetics of vapor-phase and melt-phase transitions, bench-scale experiments to determine the potential chemical and physical form of iodine emissions from the electrorefining process, and verification of iodine behavior with experiments utilizing operational facilities. Similarly, an improved understanding of iodine behavior in the environment after release from the facility stack will be required to refine dose estimations, as particulate and vapor-phase emissions result in significantly different doses to the MEI.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Adapting Traditional Hazards Analysis Methods to Address Cyber Risks

Traditional hazards analysis (HA) methods, originally developed to address physical and operational risks, often fall short when it comes to identifying and mitigating cyber threats. These cyber threats pose unique and evolving risks to critical infrastructure and industrial control systems (ICS). This report explores the integration of Cyber-Informed Engineering (CIE) principles into existing HA methods to enhance their ability to address cyber-induced risks. CIE provides organizations with a practical, cost-effective approach to closing the gap between traditional HA methods and the need for cyber risk mitigation. By leveraging existing safety processes and controls, CIE allows users to examine and mitigate cyber vulnerabilities without overhauling existing HA methods. This report identifies areas where HA and CIE naturally align and where their approaches diverge. It emphasizes how CIE principles can be used to adapt HA methods, broadening their scope to include cyber risks and enabling the mitigation of cyber- induced impacts alongside traditional hazards and failure scenarios. This report examines how CIE can be applied across various HA methods—such as Hazard and Operability Studies (HAZOP), Probabilistic Risk Assessment (PRA), Failure Modes and Effects Analysis (FMEA), Systems-Theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), and Layers of Protection Analysis (LOPA). It provides strategies for integrating CIE to strengthen the identification, assessment, and mitigation of cyber-induced risks. The findings offer a structured entry point for organizations to embed CIE concepts into hazards and safety analyses, as well as broader engineering processes, ultimately supporting the design and operation of a more resilient infrastructure.

42 ENGINEERING↗

Trustworthiness modeling and evaluation for a nearly autonomous management and control system

The Nearly Autonomous Management and Control (NAMAC) system supports the advanced reactor operation by recommending control actions to operators based on real-time measurements and digital twins (DTs) learning from the knowledge base. To enable the safe and reliable use of autonomous technologies, NAMAC and its recommendations should be trustworthy to operators and regulators at both the design and operation stages. This study proposes a NAMAC trustworthiness modeling and evaluation framework supported by trustworthiness ontologies and evidence-based approaches. The development-time and run-time ontologies are separately constructed and then converted to Bayesian networks to quantitatively evaluate the NAMAC trustworthiness. This evaluation is demonstrated by collecting and characterizing evidence from NAMAC practices, such as the development and assessment of the NAMAC system, data coverage assessment, and the training and optimizations of neural-network-based DTs. Our proposed approach can aggregate various trustworthiness attributes of complex artificial-intelligence-supported systems for safety-critical applications. It also considers the interaction between different DTs and extends beyond the trustworthiness evaluation of a single DT. In conclusion, the evidence-based method enhances the transparency of the trustworthiness modeling and evaluation processes and helps identify uncertainties and subjectivity involved in the processes.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Adapting Traditional Hazards Analysis Methods to Address Cyber Risks

Traditional hazards analysis (HA) methods, originally developed to address physical and operational risks, often fall short when it comes to identifying and mitigating cyber threats. These cyber threats pose unique and evolving risks to critical infrastructure and industrial control systems (ICS). This report explores the integration of Cyber-Informed Engineering (CIE) principles into existing HA methods to enhance their ability to address cyber-induced risks. CIE provides organizations with a practical, cost-effective approach to closing the gap between traditional HA methods and the need for cyber risk mitigation. By leveraging existing safety processes and controls, CIE allows users to examine and mitigate cyber vulnerabilities without overhauling existing HA methods. This report identifies areas where HA and CIE naturally align and where their approaches diverge. It emphasizes how CIE principles can be used to adapt HA methods, broadening their scope to include cyber risks and enabling the mitigation of cyber- induced impacts alongside traditional hazards and failure scenarios. This report examines how CIE can be applied across various HA methods—such as Hazard and Operability Studies (HAZOP), Probabilistic Risk Assessment (PRA), Failure Modes and Effects Analysis (FMEA), Systems-Theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), and Layers of Protection Analysis (LOPA). It provides strategies for integrating CIE to strengthen the identification, assessment, and mitigation of cyber-induced risks. The findings offer a structured entry point for organizations to embed CIE concepts into hazards and safety analyses, as well as broader engineering processes, ultimately supporting the design and operation of a more resilient infrastructure.

42 - ENGINEERING↗

Success Path Method: Introduction to the Success Path Method Software Tool©

As part of its commitment to advancing safety and reliability assessment methodologies, Argonne National Laboratory pioneered the use of an evaluation method called the Success Path Method (SPM) to improve risk management for offshore oil and gas operations. The development of the SPM at Argonne has been driven by the need to improve existing risk assessment methodologies by focusing on the steps necessary for success rather than failure modes alone. This is particularly important for industrial environments like offshore facilities that perform multiple functions under a continuously evolving set of operational conditions – such as water depth and temperature, currents, and weather conditions. In these dynamic environments, the traditional Probabilistic Risk Assessment (PRA) approach is far too complex as it focuses on what can go wrong – which comprises an infinite failure space that must be fully explored and understood. By shifting the focus to a finite space of success paths, the SPM enables operators and decision makers to prioritize a manageable number of steps that must go right to ensure success. Building on its five decades of experience in safety assessments for the nuclear industry, Argonne made major adaptations to existing risk assessment methods utilizing features similar to fault trees that are traditionally used in PRA to map all pathways in which the system can malfunction. In contrast, SPM identifies the components and processes that must function correctly to achieve specific outcomes – such as preventing the uncontrolled release of hydrocarbons during drilling operations. The SPM framework integrates equipment, procedures, software, processes, and human actions to ensure that physical barriers meet critical safety functions in dynamic operational conditions. This approach helps identify failure modes and improve operational risk management by narrowing the focus to key success elements, which in turn reduces uncertainty and helps users understand, manage, and respond to failures.

97 MATHEMATICS AND COMPUTING↗