Search NASA⌕ Search

SEARCH · Search NASA

Results for “Risk consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Extravehicular Activity on the Lunar Surface: Mapping Mitigation Risk Consequence for Crew Needing Assistance or Rescue

The lunar environment offers unique challenges for human health and safety over the course of performing Extravehicular Activities (EVAs) during early Artemis missions. Driver medical conditions leading to an injured EVA crewmember needing assistance or rescue were analyzed and correlated to established, defined consequence categories. Catastrophic Drivers were identified, and three mitigation strategies were analyzed to determine if there was a potential change in consequence with their application. Risk consequence across the mitigations were compared with each other and the original risk without mitigations. Mitigations were further evaluated in a broader context with prospective preventions to understand the design and risk trade space associated with an early Artemis EVA.

Risk↗

Extravehicular Activity on the Lunar Surface: Mapping Mitigation Risk Consequence for Crew Needing Assistance or Rescue

The lunar environment offers unique challenges for human health and safety over the course of performing Extravehicular Activities (EVAs) during early Artemis missions. Driver medical conditions leading to an injured EVA crewmember needing assistance or rescue were analyzed and correlated to established, defined consequence categories. Catastrophic Drivers were identified, and three mitigation strategies were analyzed to determine if there was a potential change in consequence with their application. Risk consequence across the mitigations were compared with each other and the original risk without mitigations. Mitigations were further evaluated in a broader context with prospective preventions to understand the design and risk trade space associated with an early Artemis EVA.

Risk↗

Miserable Risk Estimation: “Managing” Low-Probability, High-Consequence Risks

As with all bold endeavors, NASA missions must identify and manage their risks. While estimating the consequences of these risks is typically straightforward, it can be challenging to estimate their likelihood. This is especially true for low-probability risks, due both to the lack of operational data and the cognitive biases humans bring to risk estimation. In this talk, I will present both a tongue-in-cheek and “Management Science” approach to estimating low-probability, high-consequence risks. I then summon my Human Factors colleagues to provide NASA mission managers with the gentle guidance needed to avoid common errors in risk assessment

Mary K Kaiser↗

ORNL Peer Review Summary and Recommendations for: Advanced Reactor Designs Security Analysis, Risk, and Recommendations: Risks, Consequences, and Possible Design Mitigation Approaches Associated with Select Advanced Reactors Study

The purpose of this document is to provide a summary of the peer review conducted for the "Advanced Reactor Designs Security Analysis, Risk, and Recommendations: Risks, Consequences, and Possible Design Mitigation Approaches Associated with Select Advanced Reactors" study prepared by researchers at Idaho National Laboratory (INL), Argonne National Laboratory (ANL), and Oak Ridge National Laboratory (ORNL). The National Nuclear Security Administration (NNSA) International Nuclear Security (INS) program team requested that ORNL perform a peer review of the study report prior to publication as a final peer check before distributing the report to a broader audience.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Extravehicular Activity on the Lunar Surface: Mapping Mitigation Risk Consequence for Crew Needing Assistance or Rescue

Extravehicular activity (EVA) on the lunar surface presents unique risks to crew with possibility for injury. Without appropriate assistance or rescue capability, inability to nominally ambulate and return to a lander, especially during early Artemis missions, could have catastrophic consequences. Mapping likelihood and consequence safety risk associated with identified injury scenarios establishes a baseline from which to assess potential mitigation solutions to ensure crew health and safety. Causes leading to the need for incapacitated crew rescue (ICR) during EVA on the lunar surface were previously identified and classified using an ICR/Acute Injury scenario spectrum. Severe scenarios are those when the affected astronaut requires either partial or full continuous assistance from the rescuer. Evaluation of these continual reliance conditions included calculating event probabilities (likelihoods) associated with an early Artemis mission and mapping them to established Exploration System Directorate (ESD) probability thresholds; safety consequences were analyzed and correlated to defined ESD personnel safety categories. These resulting likelihood and consequence values served as a baseline for assessing risk reduction of three mitigation capabilities: crew assistance (rescuer crew) only, walking assist devices, and a wheeled transport device. Of the twenty-five continual reliance conditions, ten were evaluated as “catastrophic” (Level 5, loss of life) during EVA on the lunar surface with probabilities ranging from moderate to very low during an early Artemis mission. Crew assistance only and walking assist devices showed similar potential for risk reduction, with four of the ten causes decreasing to Level 4. A wheeled transport device further increased risk reduction with six of the ten conditions decreasing to Level 4. Given the catastrophic consequence of several identified conditions, assessments should be performed to determine the feasibility of mitigation capabilities. It is currently unknown whether a rescuer astronaut could effectively provide continuous assistance to enable both crew to return safely to the lander from the standpoint of both suit geometry and human performance. Although resulting in an increase in resources, providing a wheeled transport provides the highest risk reduction potential, and walking assist devices may have prevention as well as mitigation benefits.

lunar surface↗

Mapping Mitigation Risk Consequence for Crew Needing Assistance or Rescue on the Lunar Surface

Extravehicular activity (EVA) on the lunar surface presents unique risks to crew with possibility for injury. Without appropriate assistance or rescue capability, inability to nominally ambulate and return to a lander, especially during early Artemis missions, could have catastrophic consequences. Mapping likelihood and consequence safety risk associated with identified injury scenarios establishes a baseline from which to assess potential mitigation solutions to ensure crew health and safety.

lunar surface↗

Advanced Reactor Designs Security Analysis, Risk, and Recommendations: Risks, Consequences, and Possible by-Design Mitigation Approaches Associated with Select Advanced Reactors

Next-generation advanced reactors (ARs) incorporate enhanced safety systems, have smaller source terms, and feature compact modular designs, which should lessen their collective risk profiles. However, to fully evaluate risk, security needs to be a part of the equation. Without taking security into consideration, safety systems and components in the new ARs may be vulnerable to sabotage. These base attributes, coupled with enhanced security features specific to AR design through sound engineering and security-by-design (SeBD), should provide developers and operators with lower inherent security risk profiles. Building security early into the AR design may remove or passively secure potential critical targets from an adversary’s reach , thereby increasing overall safety and security. An integrated approach and diverse design team that includes engineering, operations, and security experts are fundamental to building security into the design without sacrificing fundamental operational efficiencies and principles. The objective of this project was to evaluate the security and safety interfaces for five classes of reactors, identify potential security vulnerabilities of structures, systems, and components (SSC), and underscore the need to consider security alongside safety in the design o f these concepts. The five reactor classes evaluated in this project and presented in this report are molten-salt reactors (MSR), high temperature gas reactors (HTGR), sodium-fast reactors (SFR), advanced light-water reactors (ALWR), and microreactors. These designs were selected because they reflect the concepts that are closest to market deployment and have received significant resource investments from the public and private sector. This project assesses the inherent security risks posed by common classes of ARs, provides a methodology and framework to assess security along with safety, and offers an analysis of potential mitigation strategies that could be incorporated. For each AR technology, the SSCs that relate to radionuclide source safety functions are discussed to understand the SSC contribution to safety and relative importance in the protective strategy for the design. The assumptions that went into evaluating each reactor concept originated from generic publicly available nonproprietary information and should not directly be used to qualify an absolute risk profile nor to rank specific AR designs. Instead, the purpose of the analysis is to understand and compare the generic inherent security risks of different AR technologies.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

An Operational Algorithm for Evaluating Satellite Collision Consequence

Risk is properly considered as the combination of likelihood and consequence; but conjunction assessment has usually limited itself to the consideration of only collision likelihood. When considered from an orbital regime protection perspective, the focus shifts to the question of the amount of debris that a collision might produce (the “consequence”). The present paper presents an operational algorithm for determining the expected amount of debris production should a conjunction result in a collision, and an assessment of the algorithm’s fidelity against a database of characterized objects.

Lechtenberg, Travis↗

An Operational Algorithm for Evaluating Satellite Collision Consequence

Risk is properly considered as the combination of likelihood and consequence; but conjunction assessment has usually limited itself to the consideration of only collision likelihood. When considered from an orbital regime protection perspective, the focus shifts to the question of the amount of debris that a collision might produce (the “consequence”). The present paper presents an operational algorithm for determining the expected amount of debris production should a conjunction result in a collision, and an assessment of the algorithm’s fidelity against a database of characterized objects.

Lechtenberg, Travis↗

A Review of Cybersecurity Risk and Consequences for Critical Infrastructure

This paper reviews the state of the art in risk assessment and consequences related to critical infrastructure. Different risk assessment methods are analyzed based on their goals, application domains, impacts, and consequences. This paper depicts an in-depth analysis of the existing risk assessment methods and highlights the advantages, and disadvantages associated with those methods. In addition, this paper also articulates the research challenges that are associated with developing an economically quantifiable risk assessment method or framework.

Touhiduzzaman, Md↗

Addressing Consequence within Operational Risk: An Approach for Understanding an Organization’s Unique Infrastructure Environment

The endeavor of tackling operational risk focused on consequences is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure landscape in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure landscape as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space.

99 GENERAL AND MISCELLANEOUS↗

Addressing Consequence within Operational Risk (O.T. Gagnon III) 9-18-2024

Addressing Consequence within Operational Risk: Why threats and security are just not that important! When dealing with cyber or physical risk within any critical infrastructure (CI) environment, don’t concern yourself with vulnerabilities and threats, at least not at first! Also, don’t be overly fixated on “securing the systems” within the organization. The endeavor of tackling operational risk focused on consequences in any critical infrastructure environment to include the complex Aviation ecosystem is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure environment in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure environment as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space. When it comes to cyber risks, before an organization can consider vulnerabilities within and threats to its operations, it must first have a solid understanding of the consequences existing inside its infrastructure environment. Idaho National Lab’s Consequence-Driven, Cyber-Informed Engineering is offered as an example of this approach to effective and efficient cyber risk mitigation.

99 GENERAL AND MISCELLANEOUS↗

Advanced Weather Hazard Perception Capabilities for Remotely Piloted Aircraft in Wildland Fire Operations

Weather, specifically winds, are the most variable and least predictable of the weather-related elements that affect wildfire behavior.1 This leads to aviation operations which must deal with increased risks due to dynamic weather factors. Remotely piloted aircraft provide the opportunity to remove human loss of life from these risk consequences and mitigate the overall risks for air operations for fire suppression and dropping of retardant. UAS also allows the opportunity to continue fire suppression with nighttime operations. However, with the use of new technologies in aviation operations comes additional risk factors and the need for remote sensing capabilities to identify and permit navigation around extreme weather conditions, with turbulence being the most unforeseeable. This paper presents advanced concepts for weather hazard perception capabilities for remote pilot operators to include data and display techniques intended for dynamic environments and low altitude operations. This work can support the potential of weather sensing capabilities to create hazard maps to track high-risk weather patterns in mountainous regions. Advanced sensing may provide opportunity to locate extreme turbulence hazards for uninhabited aerial systems (UAS) and decrease the likelihood of flying into unknown weather conditions to enable safe operations to assist in wildfire air support.

Tyler L Willhite↗

A Method for Evaluating and Tracking Production-Sample Test (PST) Delay Risk

This report describes a method for evaluating risk from delayed Production Sample Testing (PST), and strategies for reducing test backlogs. Risk contributions to overall risk from delayed PST include a Steady State Risk (SSR) contribution that is inherent in the qualified design and manufacturing processes, and a Non-Homogenous Production Risk (NHPR) contribution from production variation. Both definitions and evaluation techniques for these risk contributions are provided along with correlation to the standard Quality Assurance Process, QA001.2, risk ranking matrix. Methods for tracking test backlogs, and reducing backlogs are also discussed. The delayed PST evaluation method described here includes the merger of both slightly quantitative methods for tracking defect levels and the propensity for production variation with general risk management tracking tools like the likelihood vs. consequence risk ranking matrix. This merger is important because it allows more effective evaluation and communication with regards to delayed PST.

42 ENGINEERING↗

Sovereign Credit Rating Processes Adapted to Critical Infrastructure Cyber Risk Assessment

United States critical infrastructure entities are increasingly targeted by motivated and capable threat actors and must be prepared to assess and treat a diverse range of cyber risks. Consequently, this necessitates some form of analytical process to evaluate risks and inform cyber security investment decisions. A potential solution for structuring cyber risk evaluation exists within the field of sovereign credit ratings – where agencies employ mature approaches that integrate quantitative and qualitative data to produce a singular value of assessment. Adapting such approaches, we present a novel criterion and methodology for measuring and communicating the likelihood element of cyber risk. The methodology is composed of three sequential phases: a quantitative baseline organized by distinct capability frames, a bounded qualitative adjustment per frame, and a greater-bounded qualitative adjustment spanning the entire process. The process culminates in publication of a cyber capability rating that communicates a critical infrastructure entity’s ability and willingness to mitigate discontinuous function due to cyberattack.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗