Search NASA⌕ Search

SEARCH · Search NASA

Results for “ORGANIZATIONAL MODELS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Organizational System Resilience to Disinformation: A Viable Systems Model Exploration

This paper explores the utility of organizational system modeling frameworks to provide valuable insight into information flows within organizations and subsequently the opportunities for increasing resilience against disinformation campaigns targeting the system's ability to utilize information within its decision making. Disinformation is a growing challenge for many organizations and in recent years has created delay in decision making. Here the paper has utilized the viable systems model (VSM) to characterize organizational systems and used this approach to outline potential subsystem requirements to promote resilience of the system. The results of this paper can support the development of simulations and models considering the human elements within the system as well as support the development of quantitative measures of resilience.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2020

Integrated Hydro-Terrestrial Modeling: Development of a National Capability

Water is one of our most important natural resources and is essential to our national economy and security. Multiple federal government agencies have mission elements that address national needs related to water. Each water-related agency champions a unique science and/or operational mission focused on advancing a portion of the nation’s ability to meet our water-related challenges. These diverse mission needs have engendered a rich and extensive base of water-related data and modeling capabilities. While useful for their intended purposes, these capabilities are not well integrated to address complex regional problems and overarching national problems. These major investments by a number of federal agencies, however, lay the foundation for an integrated hydro-terrestrial modeling and data infrastructure that will enhance knowledge, understanding, prediction, and management of the nation’s diverse water challenges. Creating a more seamless national hydro-terrestrial modeling and data capacity presents an enormous opportunity to advance operational as well as research capabilities leading to more effective water management. Advances are necessary not only in operational tools for forecasting but also in research to identify and resolve knowledge and data gaps that lead to unacceptable uncertainties in forecast outcomes. As such, close coordination across scientific, operational, and resource management communities is required. To this end, an interagency workshop on “Integrated Hydro-Terrestrial Modeling: Development of a National Capacity” was held at the National Science Foundation (NSF) headquarters in Alexandria, Virginia in September 2019, led jointly by the NSF, the U.S. Department of Energy (DOE) and the U.S. Geological Survey (USGS) and with broader interagency support provided through an interagency steering committee. This workshop provided a venue to bring together representatives of water-related agencies and their scientific partners (including university researchers) to initiate and refine a vision for a national Integrated Hydro-Terrestrial Modeling (IHTM) and data infrastructure and advance ideas towards its development. The workshop was designed to address three critical foci to advance the development of a national IHTM capacity: “Priority Water Challenges” around which to motivate and initiate development; Technical and methodological obstacles related to data and modeling; Organizational, structural, and cultural barriers that heretofore have impeded integration of capabilities across the federal and research landscapes. The following “Priority Water Challenge” domain areas represent targets for initiating development of the IHTM and were identified and selected in alignment with priorities of the administration’s Water Sub-Cabinet: (1) Nutrient loading, hypoxia, and harmful algal blooms; (2) Water availability in the western United States; and (3) Extreme weather-related water hazards. These water challenges span agency mission boundaries and encompass a broad range of geographies, complex system dynamics and feedbacks, and critical processes spanning hydrological, climatic, and biophysical systems as well as land-use/land-cover, agricultural, built infrastructure, societal, economic, and decisional environments. These three Priority Water Challenges cannot be fully addressed without leveraging complementary and synergistic capabilities across multiple agencies.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Logistic Regression in Clinical Studies

• A logistic regression model is used when the outcome of interest is binary. The term “logistic” refers to the underlying “logit” (log odds) function that is used to model the binary outcome. • Odds ratios are produced from a logistic regression model and have a useful interpretation. • Tips, tricks and concepts used to fit logistic regression models are similar to those used in linear regression models. • Modeling building that is knowledge-based rather than automatic is preferred in most applications of logistic regression. • A logistic regression model that is overparameterized (ie, too many variables for too few events) can result in odds ratios that are implausibly large and confidence intervals that are wide and uninterpretable. These types of “overfitted” models should be avoided. • Logistic regression models can be fit using most standard statistical software.

62 RADIOLOGY AND NUCLEAR MEDICINE↗
DOE OSTI2023

Light Water Sustainability Program: Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis

This report describes the interim progress for research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and elsewhere throughout the plant, along with a greater use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human-performance-related organizational and technical design issues are identified and addressed. This report describes modeling tools and techniques, based on sociotechnical system theory, to support these design goals and their application in the current research effort. The report is intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control and feedback relationships amongst the system’s technical and organizational components. Up to this point, we have employed a Causal Analysis based on STAMP (CAST) technique to examine a performance- and safety-related incident at an industry partner’s plant that involved the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. Our ongoing analysis is focused on identifying near-term process improvements and longer-term design requirements for an optimized IAE system. The latter analyses will employ a second STAMP-derived technique, System-Theoretic Process Analysis (STPA). STPA is a useful modeling tool for generating and analyzing actual or potential information control structures. Finally, we have begun modeling plantwide organizational relationships and processes. Organizational system modeling will supplement our CAST and STPA findings and provide a basis for mapping out a plantwide information control architecture. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the initiating event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. We present two preliminary information automation models. The proactive issue resolution model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system. From our results, we have generated a set of preliminary system-level requirements and safety constraints. These requirements will be further developed over the remainder of our project in collaboration with nuclear industry subject matter experts and specialists in the technical systems under consideration. Additionally, we will continue to pursue the system analyses initiated in the first part of our effort, with a particular emphasis on STPA as the main tool to identify weak or weakening control structures that affect the resilience of organizations and programs. Our intent is to broaden the scope of the analysis from an individual use case to a related set of use cases (e.g., maintenance tasks, compliance tasks) with similar human-system performance challenges. This will enable more generalized findings to refine the Proactive Issue Resolution and IAE models, as well as their system-level requirements and safety constraints. We will use organizational system modeling analyses to supplement STPA findings and model development. We conclude the report with a set of summary recommendations and an initial draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

The CYBER security – Competency Health and Maturity Progression (CYBER-CHAMP) model: Extending the National Initiative for Cybersecurity Education (NICE) Framework Across Organizational Security

Problem Statement: There is a pervasive talent deficit in the cybersecurity industry that prevents employers from being able to fill their open positions efficiently. A holistic approach to security is required to ensure organizations have adequate prevention and response capabilities in case of a cyberattack. Specifically, industrial control systems (ICS’s) and their operational technology (OT) components have become a constant target for cyberattacks. Research Questions: It is proposed that the NICE Framework should be extended in the following areas: 1) Include guidance regarding the job roles and competencies for both IT and OT professionals. 2) Offer step-by-step solutions, based on the work role mappings from the NICE Framework, to increase cybersecurity through employee training and education. 3) Provide a streamlined, lifecycle approach to building a cybersecurity program. Contribution: The CYBER security – Competency Health and Maturity Progression (CYBER-CHAMP©) model provides a customized solution for businesses to understand their education gaps in organizational security and target areas for improvement. Rationale: The Framework for Improving Critical Infrastructure Cybersecurity v1.1 addresses ICS but does not offer a measurement of cybersecurity maturity or clear methods to ascertain an organization’s current risk profile. In Phases 1 and 5 of the model, measurements are provided to help an organization build their current and target risk profiles. The NICE framework provides a structure for planning an IT cybersecurity workforce, but the OT aspects of cybersecurity are only briefly discussed. The model uses Phases 2-3 to examine the competencies of an organization’s workforce, which includes both IT and OT roles. Current frameworks do not offer next steps to increase an organization’s cybersecurity. During Phase 4, employees’ roles are mapped to training, education, and/or certifications from common vendors. Investigative Approach: The model provides measurements and metrics for both an organization’s status and continual improvement. This improvement methodology includes guidance for creating an overall strategic plan for security improvement via products designed to increase an organization’s operational readiness through workforce competency health. Lessons Learned: Depending on who was participating, there were contradicting answers given in Phase 1 due to different security cultures in the organization. This revelation has influenced the steps listed in the User’s Guide, where Phase 1’s first recommended step is to assemble a team that champions the facilitation and implementation of the model in the organization. During Phase 2, the discovery was made that organizations may be missing roles that are necessary to perform critical cybersecurity functions. By understanding the functional roles and competencies needed, they can contract or hire cybersecurity help to fill these gaps. Implications: Using the model, organizations can discuss quantitative measures for improvement as a business case for advancing their security program. Future research can validate and extend the present theory and model to a variety of environments. It is of interest to investigate additional security roles and knowledge domains that are used to build standardized cybersecurity curriculum.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Organizational Influence on Supply Chain for Digital Energy Infrastructure: Business Models, and Policy Landscape

Significant investment is driving the essential modernization and digitization of U.S. energy infrastructure, but the United States faces a key challenge in this grid transformation: our renewable and clean energy supply chains have limited capacity to source necessary digital assets through U.S. or allied sources. Batteries and their associated power electronic interfaces are key components to delivering clean and more resilient energy delivery, providing much-needed fast ramping, emergency discharge, generation, and operations support to the electric grid. These services have grown to be invaluable over the past 10 years and will soon be an irreplaceable component of energy delivery. While there have been significant strides to move supply chains for raw and critical materials to U.S. and allied nations, the control and power electronic industry has lagged, in part because of lower cost margins. For example, the United States now has growing capacity to manufacture solar photovoltaic (PV) panels, but 90% of the inverters—which are essential to the conversion of DC to AC for grid connection and controls—are made in or source parts from the People’s Republic of China (PRC). While a global supply chain is beneficial for many economic and supply diversification reasons, presence of foreign entities of concern (FEOC) in a dominant role in this supply chain brings additional concerns for national security of infrastructure. The BESS relationship and new clean energy have features that warrant discussions and additional focus on impact for technology security, given their critical role. This review considers the impact and solutions for complex business and policy landscapes in clean energy supply chain, and the benefit trade-offs, focusing on the Battery Energy Storage System case study, and its complex organizational relationships across both the US, Allied countries and Foreign Entities of Concern. While many examples in this paper are presented on PRC focused manufacture, this could apply to any potentially adversarial relationship

25 - ENERGY STORAGE↗
DOE OSTI2024

A Generalized approach to the operationalization of Software Quality Models

Comprehensive measures of quality are a research imperative, yet the development of software quality models is a wicked problem. Definitive solutions do not exist and quality is subjective at its most abstract. Definitional measures of quality are contingent on a domain, and even within a domain, the choice of representative characteristics to decompose quality is subjective. Thus, the operationalization of quality models brings even more challenges. A promising approach to quality modeling is the use of hierarchies to represent characteristics, where lower levels of the hierarchy represent concepts closer to real-world observations. Building upon prior hierarchical modeling approaches, we developed the Platform for Investigative software Quality Understanding and Evaluation (PIQUE). PIQUE surmounts several quality modeling challenges because it allows modelers to instantiate abstract hierarchical models in any domain by leveraging organizational tools tailored to their specific contexts. Here, we introduce PIQUE; exemplify its utility with two practical use cases; address challenges associated with parameterizing a PIQUE model; and describe algorithmic techniques that tackle normalization, aggregation, and interpolation of measurements.

Data aggregation↗
DOE OSTI2020

A Community Energy Operations and Planning System: Concept, Use cases, Metrics, and Benefits

Community and city leaders are interested in achieving sustainability goals, providing resilient energy infrastructure, and improving economic competitiveness. Community-level data acquisition and analysis can provide energy and associated benefits that are not possible at the single building level. However, there is a lack of organizational structure, common semantic data models, interoperable systems, and methods to support data-driven decision-making for community-scale energy supply and demand systems. We explored the need and opportunity for a Community Energy Operations and Planning System (Community EOPS), a potential data exchange platform. We conducted “customer discovery” interviews, and reviewed literature, public tools, and technology platforms to identify key energy data “users” and use cases in communities. The key users of the Community EOPS could be developers of mixed-use districts, corporate, defense and university campus energy managers, and city managers of cities that own their energy utility. The value could be for community planning and reporting (for energy data-integrated land use planning and community infrastructure investments in microgrids, storage, district heating and cooling), energy efficiency (leveraging optimizations for community scale energy supply and demand), flexible load management (grid-edge load management to offset, shift, and flatten loads for multiple buildings and EV fleets), cost savings and revenue generation (participating in grid services), and social benefits such as energy resilience, equity, and awareness. We developed a conceptual Community EOPS architecture with recommendations for streamlined and prioritized data acquisition, sharing, and integration driven by prioritized use cases, common metrics, and actionable visualizations that can provide value to a community’s users.

Singh, Reshma↗
DOE OSTI2022

Always look on the bright side of life: Taking a different perspective on cybersecurity performance

This presentation will introduce participants to key mental models on how to think about and understand safety from two of the leading voices in the discipline – Dr. Erik Hollnagel and Dr. Todd Conklin – and from there we ask the simple question of “how can we apply this to cybersecurity?” At the completion of this presentation attendees will be able to describe Dr. Hollnagel’s Safety-II approach and Dr. Conkiln’s definition of safety as “not the absence of accidents but the presence of effective defenses.” They will be able to explain how these ideas translate to the cybersecurity world broadly, and more specifically to operational technology cybersecurity where physical safety consequences are coupled to control system performance. Finally, participants will be able to identify how selected principles from Weick and Sutcliffe’s high reliability organization theory can help operationalize these key mental models around safety, for improved organizational cybersecurity over the long run.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

From clutter to clarity: Emergent neural operators via questionnaire metrics

Real-world datasets in chemical engineering and bioengineering processes—such as those from catalytic reactors, multiphase flows, polymerization reactors, bioreactors, and clinical trials—can often be unlabeled or disorganized, rendering the training of existing supervised learning models ineffective at learning the underlying dynamics. To salvage these datasets for decision-making, we first seek to obtain clarity from the cluttered data. Here, we present a framework for developing “structural” generative models, discovering emergent equations, and constructing efficient emulators from scrambled datasets by integrating unsupervised organizational learning techniques (Questionnaires) with advanced deep learning architectures (Deep Hidden Physics Models and Deep Operator Networks). Our approach is demonstrated on two illustrative model systems: (a) a 1D advection–diffusion partial differential equation representing a winding underground pipe and (b) an ensemble of Stuart–Landau oscillators, an agent-based system of coupled ordinary differential equations. In both cases, we successfully reconstruct meaningful spatial, temporal, and parameter embeddings from scrambled data, enabling good predictions of system dynamics. As a result, we highlight the framework’s potential for broader applications, enabling data-driven system identification in fields with inherently disorganized or hidden parameter spaces.

42 ENGINEERING↗
DOE OSTI2023

Embracing fine-root system complexity in terrestrial ecosystem modeling

Projecting the dynamics and functioning of the biosphere requires a holistic consideration of whole-ecosystem processes. However, biases toward leaf, canopy, and soil modeling since the 1970s have constantly left fine-root systems being rudimentarily treated. As accelerated empirical advances in the last two decades establish clearly functional differentiation conferred by the hierarchical structure of fine-root orders and associations with mycorrhizal fungi, a need emerges to embrace this complexity to bridge the data-model gap in still extremely uncertain models. In this work, we propose a three-pool structure comprising transport and absorptive fine roots with mycorrhizal fungi (TAM) to model vertically resolved fine-root systems across organizational and spatial–temporal scales. Emerging from a conceptual shift away from arbitrary homogenization, TAM builds upon theoretical and empirical foundations as an effective and efficient approximation that balances realism and simplicity. A proof-of-concept demonstration of TAM in a big-leaf model both conservatively and radically shows robust impacts of differentiation within fine-root systems on simulating carbon cycling in temperate forests. Theoretical and quantitative support warrants exploiting its rich potentials across ecosystems and models to confront uncertainties and challenges for a predictive understanding of the biosphere. Echoing a broad trend of embracing ecological complexity in integrative ecosystem modeling, TAM may offer a consistent framework where modelers and empiricists can work together toward this grand goal.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2026

Integrated System Planning: Emerging Software Requirements in the Power Industry

Power system planning software remains fragmented across organizational boundaries, with specialized tools for capacity expansion, production cost modeling, power flow, and dynamic analysis operating on incompatible data models and assumptions. This article argues that the fragmentation is not merely a technical problem but a predictable consequence of Conway's law: software architectures mirror the departmental structures within which they are developed. Regulatory milestones like Federal Energy Regulatory Commission (FERC) Order 888 formalized these divisions, but the roots trace back to the distinct engineering disciplines-mechanical, chemical, and electrical-that staffed generation and transmission planning departments in vertically integrated utilities. As the industry moves toward integrated system planning (ISP) that coordinates generation, transmission, and distribution investment decisions, the software ecosystem must evolve accordingly. We identify five categories of software requirements to enable this transition: coherent data inputs decoupled from individual applications, unified and extensible data schemas, modular component representations that support multiple abstraction levels, lifecycle management of planning datasets, and well-defined application programming interface (API) contracts that separate data exchange from algorithmic control. We examine how these requirements interact with three common workflow patterns-serial gate clearing, sequential multiapplication, and convergence oriented-and discuss the interface design principles each demands. We then outline a vision for platform-based planning architectures where specialized analytical services compose through standardized interfaces and where artificial intelligence (AI)/machine learning (ML) tools augment decision support within a disciplined software infrastructure. The practices proposed here offer a path from today's siloed tool collections toward collaborative planning ecosystems capable of handling the complexity of modern power system transformation.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis: Tool Development and Method Evaluation

This report is an update to a prior report that describes progress and findings for a program of research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and throughout the plant, along with a greater interest in the use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human performance-related organizational and technical design issues are identified and addressed early in the design process. This report describes modeling tools and techniques, based on sociotechnical systems theory, to support these design goals and their application in the current research effort. The report is primarily intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control, feedback, and communication relationships amongst the system’s technical and organizational components. We have employed two STAMP-based tools in this effort. The first is Causal Analysis based on STAMP (CAST), an accident and incident analysis technique that was used to examine a performance- and safety-related incident at an industry partner’s plant involving the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. The second tool is Systems Theoretic Process Analysis (STPA) which is a proactive risk analysis tool used to examine existing and potential, planned sociotechnical systems. STPA was used to identify risk factors in the current design of a generic nuclear power plant (NPP) preventive maintenance system. Our analyses focused on identifying near-term system improvements and longer-term design requirements for an optimized IAE system. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived time and schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the eventual event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. STPA findings exposed several areas of concern in the design of current preventive maintenance systems. We also present two preliminary information automation models. The proactive issue resolution (PIR) model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system and represents an end-state vision for our work. From our results, we have generated an initial set of preliminary system-level requirements and safety constraints for these models. We have also focused on early development of easy to learn, easy to use “transportable” tools for sociotechnical systems analysis. We intend these to be used by NPP personnel as a means of gaining reliable and relatively quick insight into (1) sociotechnical systems factors impacting incidents and accidents, (2) potential sociotechnical risk factors in existing or planned system designs, and (3) potential weaknesses in a system’s safety and/or information control structure. We conclude the report with a set of summary recommendations, a discussion of planned and potential follow-on research and development, and a draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

Multiple Pathways of Influence for Tightly and Loosely Structured Organizations: Implications for Systems Resilience

Organizations play a key role in supporting various societal functions, ranging from environmental governance to the manufacturing of goods. Here, the behaviors of organization are impacted by various influences, including information, technology, authority, economic leverage, historical experiences, and external factors, such as regulations. This paper introduces a generalized framework, focused on the relative structure of an organization (tight vs. loose), that can be used to understand how different influence pathways can impact decision-making within differently structured organizations. This generalized framework is then translated into a modeling and simulation platform to support and assess implications of these structural differences in resilience to disinformation (measured by organizational behaviors of timeliness and inclusion of quality information) using a systems dynamics approach Preliminary results indicate that a tightly structured organization may be less timely at processing information but could be more resilient against using poor quality information in organizational decisions compared to a loosely structured organization. Ongoing work is underway to understand the robustness of these findings and to validate current model design activities with empirical insights.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2023

HOP and Cybersecurity: Leveraging safety and reliability experience to improve digital security culture

This presentation will introduce participants to key mental models on how to think about and understand safety and the organizational attributes that support it from three of the leading voices in the discipline – David Marx, Dr. Erik Hollnagel and Dr. Todd Conklin – and from there we ask the simple question of “how can we apply this to cybersecurity?” Opportunities, similarities, and differences from the history of accomplishment applying human and organizational performance principles to safety and reliability can be collectively leveraged to the meet the challenge of cybersecurity for OT/ICS/cyber-physical systems. This is the same intent as the "Cybersecurity Culture" principle of Cyber-Informed Engineering (CIE).

42 ENGINEERING↗
DOE OSTI2023

Addressing Human and Organizational Factors in Nuclear Industry Modernization: A Sociotechnically Based Strategic Framework

The modernization of nuclear power plants will require an advanced concept of operations, involving an integrated set of tightly coupled systems in which all stakeholders act in a coordinated manner. For this modernization effort to be enabled, we developed a human and organizational factors approach based on a broad sociotechnical framework. Starting from core human factors principles, we conducted a literature review of the methods and approaches relevant to the modernization problem. These included not only core disciplines such as cognitive systems engineering, systems theoretic accident modeling and processes, human systems integration, resilience engineering, and macroergonomics but also related topics of safety culture and organizational change. From this literature, we developed a conceptual framework centered around the work system with its four interacting components: people, technology, process, and governance. In an effective work system, these four components are jointly optimized according to three systems criteria: efficiency, effectiveness, and safety. System failure may result from excessive emphasis on any one criterion. The actual work of attaining joint optimization in a given work system can be accomplished by utilizing three high-level functions: knowledge elicitation, knowledge representation, and cross-functional integration. Finally, we illustrated the utility of this approach by applying it to practical problems and case studies.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗