Search NASASearch

SEARCH · Search NASA

Results for “Consequence Focused Design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Data Centers and Digital Assurance Workshop 3 – Mitigations for Digital Assurance Risks

The third session of the TADA (Technical Assistance for Digital Assurance) Data Centers Cohort, held on November 18, 2025, focused on developing mitigation strategies for digital assurance risks identified in previous workshops. Hosted by Idaho National Laboratory (INL) and ScottMadden, the session emphasized the application of Cyber-Informed Engineering (CIE) to data center infrastructure, particularly at the utility–data center interface. Participants revisited and ranked key digital assurance risks, including architecture and interface weaknesses, governance gaps, and AI-enabled threats. The workshop introduced the 12 principles of CIE, advocating for consequence-focused design, engineered controls, and secure information architecture to proactively reduce cyber-physical vulnerabilities. These principles were applied to critical data center systems such as power distribution, UPS, cooling, SCADA/BMS, and grid-forming batteries. The session also addressed governance challenges at the interconnection boundary, highlighting the need for clear roles in telemetry sharing, firmware management, and trip settings. Special attention was given to emerging risks from behind-the-meter (BTM) generation, including reverse-power flow and the integration of small modular reactors (SMRs), which shift data centers from large loads to complex generation nodes. Participants explored how interconnection agreements can serve as enforceable instruments for digital assurance, and reviewed gaps in current standards such as NERC CIP, IEC 62443, and IEEE 1547. The workshop concluded with pathways to standardization, including model agreement language, state-level programs, and expanded NERC guidance. INL also presented tools and frameworks for secure procurement and supplier risk management, reinforcing the need for integrated engineering and policy solutions to secure the evolving data center–grid ecosystem. Session 3 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION

Cyber-Informed Engineering Workbook: ADMS

This workbook presents a hypothetical project designed to facilitate discussion and the practical application of cyber-informed engineering principles.

42 ENGINEERING

Cyber Informed Engineering (CIE) Principles Slide Presentation [Slides]

This document describes the concept and application of Cyber-Informed Engineering (CIE), a methodology that integrates cyber threat awareness into all stages of the systems engineering life cycle. It delineates how CIE enhances the security posture of critical infrastructure systems, which are increasingly targeted by sophisticated cyber threats. The exposition proceeds to methodically walk through the twelve foundational principles of CIE, each serving as a strategic guidepost for embedding cybersecurity into the fabric of system design, development, operation, and maintenance. The principles highlight the importance of proactive and comprehensive security measures that span from risk assessment to continuous improvement, ensuring that systems are not only designed with security in mind but are also resilient in the face of evolving cyber threats.

42 ENGINEERING

Cyber-Informed Engineering Validation Methods and Guidance

Validation is an important step in any systems engineering process to ensure the correct system was made to fulfill stakeholders’ needs, goals, and expectations. In the context of Cyber-Informed Engineering (CIE), validation ensures cyber impact is reduced through implemented design choices and CIE requirements. This document details a process in validating CIE-based design choices relative to their effectiveness at mitigating high consequence events. The document includes a case study to illustrate the CIE validation process. The case study explores the implementation of CIE validation within the engineering lifecycle of a chemical mixing plant.

42 ENGINEERING

Cyber-Informed Engineering (CIE) Benefits Quantification: Recommendations for Consideration

Cyber-Informed Engineering (CIE) integrates engineering principles into the design, development, and operation of cyber-physical systems (CPS) to mitigate or eliminate the impact of cyber-enabled attacks. In July 2024, Idaho National Laboratory (INL) engaged MITRE researchers to investigate methods for systematically measuring the benefits of CIE implementation. This included evaluating the success and outcomes of CIE, identifying and quantifying the value of early adoption, and determining the business justification for its implementation, especially in existing infrastructure. MITRE reviewed existing methods in engineering and cybersecurity to understand how organizations prioritize security investments, considering their strengths, weaknesses, and relevance to CIE stakeholders. Based on this analysis, MITRE proposed potential approaches for quantifying CIE benefits and provided recommendations for INL's consideration.

42 ENGINEERING

Cyber-Informed Engineering Workbook: Substations

This workbook contains a case study based on a hypothetical substation project, intended to aid in the conversation and utilization of principles related to Cyber-Informed Engineering.

42 ENGINEERING

Cyber-Informed Engineering Adoption in University Engineering Programs: An Overview of CIE Integration Successes at Nine U.S. Educational Institutions

This report examines the adoption of Cyber-Informed Engineering (CIE) in university engineering programs, driven by the need to protect critical energy infrastructure from adversarial threats. CIE equips current and future engineers and technicians with the necessary mindset, skills, and competencies to enhance the resilience of engineered systems against cyber attacks. This report highlights nine academic partners who are incorporating CIE into their curricula through various approaches, including lectures, courses, and certificates.

42 ENGINEERING

Integrating Cyber-Informed Engineering into Enterprise Risk Management

This document supports the application of Cyber-Informed Engineering (CIE) within the context of Enterprise Risk Management (ERM) to enhance cyber-resilience. It highlights that many critical infrastructure organizations use ERM to manage business risks and emphasizes the importance of evaluating critical systems and assets. The proposed approach can be adopted independently of formal ERM processes and offers a starting point for integrating CIE alongside existing or new ERM practices. Both CIE and ERM are iterative, and their alignment fosters continuous improvement and supports the engineering and operations cultures of an organization.

42 ENGINEERING

Cyber-Informed Engineering (CIE) Guidance to Defeat Systematic OT Weaknesses

This research summary outlines the University of Illinois Information Trust Institute (ITI) team's evaluation of whether applying the 12 Cyber-Informed Engineering (CIE) Principles could reduce or eliminate weaknesses identified by the SEI-ETF in engineered systems. ITI's findings suggest that applying CIE principles to weaknesses in MITRE CWE View 1358 can potentially mitigate or eliminate those vulnerabilities.

42 ENGINEERING

Cyber-Informed Engineering Workbook: SCADA (VoltVAR)

This case study workbook provides a hypothetical project to support discussion and application of Cyber-Informed Engineering principles. Participants in the workshop are encouraged to use the workbook to capture insights and lessons learned.

42 - ENGINEERING

Cyber Informed Engineering (CIE) Curriculum Guide

The Cyber-Informed Engineering (CIE) Curriculum Guide provides a framework, guidance, and resources for incorporating CIE into university-level engineering programs and related educational activities. A key goal of this guide is to help institutions deliver CIE focused education to produce future engineers and technicians who meet the nation’s infrastructure needs. To accommodate a broad range of educational goals and approaches, this guide outlines several practical integration strategies, links to resources that can accelerate CIE adoption, and offers perspectives from partner academic institutions on the various implementation strategies.

42 ENGINEERING

Cyber-Informed Engineering: Standards Development Organization Quick Start Guide

Cyber-Informed Engineering (CIE) is an emerging methodology focused on identifying and reducing high-consequence events that may affect physical critical infrastructure systems as a result of their dependence on digital technology. CIE, developed by National Laboratories and promoted by the Department of Energy (DOE), incorporates consequence-focused planning into the design and engineering process from the earliest stages of a project. This guide provides a concise overview of CIE and offers practical insight into how Standards Development Organizations (SDOs) can interpret CIE principles and apply those concepts in updates to various standards. It is important to remember that CIE extends beyond a compliance checklist, emphasizing a broader, interpretive approach. Instead, it encourages an interpretive mindset - a "turning of 'what if' to 'even if'" approach that anticipates and engineers out high-consequence events. The authors encourage SDOs to establish and promote CIE principles as enhancements for more resilient-by-design outcomes across critical infrastructure energy sectors. The 12 core principles of CIE outline specific behaviors and actions that SDOs and engineers may adopt to enhance system resilience. This guide applies these principles in a manner intended to be relevant across various technologies and threat landscapes. We welcome institutions and vendors to identify new or different framework alignments and mappings as we collectively work towards a safer and more reliable digital landscape.

97 MATHEMATICS AND COMPUTING

Model-based Hierarchical Reinforcement Learning for Improved Physical Security Design: A Prototype

Prior work in FY24 developed an adversarial AI agent aid in path analysis of physical protection systems. This agent, trained using a model-based reinforcement learning algorithm, was able to successfully learn the most vulnerable path in facilities. It was able to extend the current state of practice for physical protection design by exhibiting dynamic behavior based on current environmental conditions. Whereas PathTrace largely performs a static, graph-based analysis, the AI agent was able to make decisions based on relative position in the facility, current conditions (was the adversarial agnet discovered?), and proximity to secondary targets. The agent demonstrated some novel capabilities, but had limitations that need to be resolved before it can be used for production purposes. For example, the adversarial agent generalizes poorly and takes a relatively long time to train. Nonetheless, there is still considerable promise for developing the adversarial agent further in order to explore even richer, more dynamic behaviors (e.g., adversary motivations, environmental debris, and more). This work considers a complementary idea; development of a planning agent. The planning agent is envisioned as an auto-complete-like tool that can help accelerate security system design by human experts. The agent would respect existing barriers and sensors placed by a human expert while offering cost-effective suggestions (i.e., implicitly balancing effectiveness with cost) to improve the design. The goal is for this agent to be part of an expert’s toolbox, not to totally upend the current state-of-practice, or to displace human experts. The ultimate goal would be concurrent training of both the adversarial and planning agent together, to learn entirely through self-play. This would represent an entirely new way of performing system deign. We selected a hierarchical, model-based reinforcement learning algorithm to serve as the planning agent. This is an extension of concepts used in the prior FY24 adversarial agent work. There, we had a single agent acting an environment. Here, we have two different sub-agents (policies), working together, to form a complete agent. There is a manager policy, which can select abstract goals on slower time scales, and a worker, which performs primitive actions to reach goals selected by the manager. It is worth noting that this class of algorithm is challenging to work with. From our understanding, our work is one of the first successful uses of model-based reinforcement learning (MBRL) in nuclear energy1 , and likely the first hierarchical model-based reinforcement learning application in nuclear energy. Further, this work is one of the first known attempts to apply AI to perform a design tasks in nuclear energy. Consequently, there were significant implementation challenges and the bulk of the work was focused on successful implementation and algorithm design. The results presented here are very low technology readiness level as a consequence of the lack of related literature, but still represent a significant step forward in the pursuit of applied AI for design.

42 ENGINEERING

NASA's Bioreactor: Growing Cells in a Simulated Microgravity Environment

National Science Education Standards (NSES), Science for All Americans, the Secretary's Commission on Achieving Necessary Skills (SCANS) as well as the National Aeronautics and Space Administration (NASA) are all making an effort to promote scientific literacy in America. Unfortunately, major evaluation programs such as the National Assessment of Educational Progress (NAEP) and the Third International Mathematics and Science Study (TIMSS) have provided information that suggested our students are not able to compete with peers from comparable countries. Although results indicated that American students are recalling memorized, factual knowledge well enough, the real problem is the ability to apply what they know. Concerned with these reports, the National Science Teacher's Association (NSTA) has developed a mission to support innovation and high quality in science teaching and learning for every student. NSTA recommends less emphasis on factual knowledge (memorization) and information and more understanding of the concepts. Science process skills are considered imperative to prepare America's students for the 21st century. The National Aeronautics and Space Administration (NASA) supports this mission and adds that NASA strives to help prepare and encourage the next generation of researchers and explorers. One method that NASA supports educators and its mission is to publish educational briefs. NASA describes a brief as a publication that ranges from one-to-thirty pages. The focus is on mission discoveries and results. The brief provides curriculum to educators that supports their objectives and NASA's interest. Educational Briefs are specific to the grade level and course so that educators may have choices that fit their methods and students level. Sometimes, the brief includes lessons and activities teachers may use. For example, NASA's Microgravity Division has designed a student bioreactor. Consequently, an Educational Brief is being written that focuses on how to build a student bioreactor and experiments that can be conducted in it. These experiments mimic the experiments done by NASA and other researchers in the real world of work.

Richardson, Denise

Introduction to Solid Edge(TM)

Solid Edge was conceived and developed to provide breakthrough levels of productivity for engineers and designers by providing tools focused on their daily work. This user-oriented approach led to a focus on five key areas: 1) assembly-focused design, 2) ease of use, 3) plug and play software, 4) superior part modeling, and 5) production drafting. Mechanical designers work primarily with assemblies of parts that together perform a useful function. The parts themselves are principally a consequence of the function of the assembly and the interrelationships between parts. Breakthroughs in productivity will come through a focus on making the design of assemblies easier, with enhanced part design a prerequisite to that. Enhancements already in development are part to part interaction, more assembly features applying to multiple parts, exploded assemblies, assembly playback, enhanced BOM, etc.

Smith, John C.

Carbon Ore-Derived Critical Materials for Clean Energy Technologies

Conference presentation at American Institute of Chemical Engineers (AIChE) Annual Meeting, San Diego, California, October 27–31, 2024. Trends in the manufacture of electric vehicles that use graphite-based LIBs are rising steeply in the United States and globally, but the U.S. domestic supply chains for graphite, the largest component in an LIB by mass, is severely limited and faces complicated geopolitical dynamics with foreign sources. Consequently, the United States has designated graphite as a critical mineral to focus attention and resources to develop technologies to meet the challenge of limited domestic graphite supply chains. Results obtained so far based on the UCOP process have successfully validated the technology at the laboratory scale, with the produced graphite material showing up to 95% degree of graphitization, high carbon purity of ~99.98%, residual ash content of ≤0.02%, negligible moisture, low trace elements, and high electrochemical stability. These results suggest that the emerging UCOP technology is a promising approach to effectively synthesize high-quality graphite from abundant coal and coal waste resources in the United States to create a sustainable domestic critical graphite supply chain. A brief description of the status of UCOP process development and representative results will be presented.

01 COAL, LIGNITE, AND PEAT

Introduction to the IMPACT Probabilistic Risk and Tradespace Analysis Tool for Medical System Design

Background: Probabilistic risk analysis (PRA) is a method for estimating risk in complex engineered systems that, at a basic level, focuses on what can go wrong and the likelihood and consequences of those occurrences. NASA has used PRA as an integral component of medical system risk estimation and design for spaceflight. IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a novel tool to meet these goals for exploration missions. Overview: IMPACT performs hundreds of thousands of Monte Carlo simulations of missions to build aggregate pictures of medical risk. These simulations are based on 120 possible medical conditions (the IMPACT Condition List) selected in a consensus-based process because they are of highest likelihood and/or consequence for exploration spaceflight. The conditions are then tied to clinical capabilities which can be used for management (e.g., inserting an IV) and then to over 600 specific resources needed to deliver a capability (e.g., an angiocath or an ultrasound). Different mission profiles can be simulated with user-specified inputs such as mission duration, destination, number of crew and pre-existing medical conditions, and EVA frequency. While the IMPACT evidence base is designed for exploration environments, these user inputs allow the tool to be used across a broad range of missions. IMPACT’s primary outcome metrics include loss of crew life (LOCL, a measure of in-flight mortality due to medical conditions), need for evacuation (RTDC, return to definitive care), and crew disability (TTL, task time lost based on how medical conditions impact the ability to perform over 1000 specific exploration mission crew tasks). In addition to modeling medical risk, IMPACT also accepts user-specified constraints, such as limitations of mass or volume, and will output a recommended clinical capability set and specific medical resources that meet the mission constraints. Discussion: This abstract will provide an introduction to IMPACT and describe the nature of the underlying medical evidence. It will also detail potential use cases for how this tool can be utilized by NASA or commercial spaceflight providers.

Ben Easter