Browse Topic: Risk management

Items (261)
Introducing connectivity and collaboration promises to address some of the safety challenges for automated vehicles (AVs), especially in scenarios where occlusions and rule-violating road users pose safety risks and challenges in reconciling performance and safety. This requires establishing new collaborative systems with connected vehicles, off-board perception systems, and a communication network. However, adding connectivity and information sharing not only requires infrastructure investments but also an improved understanding of the design space, the involved trade-offs and new failure modes. We set out to improve the understanding of the relationships between the constituents of a collaborative system to investigate design parameters influencing safety properties and their performance trade-offs. To this end we propose a methodology comprising models, analysis methods, and a software tool for design space exploration regarding the potential for safety enhancements and requirements
Fornaro, GianfilippoTörngren, MartinGaspar Sánchez, José Manuel
The modern-day vehicle’s driverless or driver-assisted systems are developed by sensing the surroundings using a combination of camera, lidar, and other related sensors by forming an accurate perception of the driving environment. Machine learning algorithms help in forming perception and perform planning and control of the vehicle. The control of the vehicle which reflects safety depends on the accurate understanding of the surroundings by the trained machine learning models by subdividing a camera image fed into multiple segments or objects. The semantic segmentation system comes with the objective of assigning predefined class labels such as tree, road, and the like to each pixel of an image. Any security attacks on pixel classification nodes of the segmentation systems based on deep learning result in the failure of the driver assistance or autonomous vehicle safety functionalities due to a falsely formed perception. The security compromisations on the pixel classification head of
Prashanth, K.Y.Rohitha , U.M.
Systems Engineering is a method for developing complex products, aiming to improve cost and time estimates and ensure product validation against its requirements. This is crucial to meet customer needs and maintain competitiveness in the market. Systems Engineering activities include requirements, configuration, interface, deadlines, and technical risks management, as well as definition and decomposition of requirements, implementation, integration, and verification and validation testing. The use of digital tools in Systems Engineering activities is called Model-Based Systems Engineering (MBSE). The MBSE approach helps engineers manage system complexity, ensuring project information consistency, facilitating traceability and integration of elements throughout the product lifecycle. Its benefits include improved communication, traceability, information consistency, and complexity management. Major companies like Boeing already benefit from this approach, reducing their product
Azevedo, Marcos PauloLahoz, Carlos Henrique Netto
North American automakers and EV battery firms have five years to erase China's dominance in technology and manufacturing or they may face the reality of buying batteries from China for the foreseeable future. That was the message from battery-analysis company Voltaiq CEO Tal Sholklapper at a media briefing in Detroit. “We're in the final innings now,” Sholklapper said. “If the industry around batteries and electric vehicles and all the follow-on applications wants to make it, we're going to have to change the way we play.”
Clonts, Chris
In the context of insufficient international management experience, this study combines the current situation of Chinese aviation and the characteristics of unmanned aircraft (UA) operation, adopts the specific operations risk assessment (SORA) method, and conducts in-depth research on the trial operation risks of UA in urban low-altitude logistics scenarios, conducting effective evaluations and project practices. This study starts from two dimensions of ground risk and air risk, determines the boundaries required for safe operation of UA, and improves the robustness level of UA operation through ground risk mitigation measures and air risk mitigation measures. At the same time, a series of compliance verification methods are provided to meet 24 operational safety objectives (OSO) (including design characteristics, operational limitations, performance standards, safety characteristics, communication requirements, emergency response plans, etc.), ensuring that UA operation does not pose
Li, LiLiu, WeiweiFu, Jinhua
This document specifically pertains to cybersecurity for road vehicles. This document encompasses the entire vehicle lifecycle of key management. It has been developed by SAE Committee TEVEES18F, Vehicle Security Credentials Interoperability (VSCI), a subcommittee of SAE Committee TEVEES18A, Vehicle Cybersecurity Systems Engineering Committee. This committee is authorized under the scope and authority fo the SAE Electronic Design Automation Steering Committee (also known as the Electronic Systems Group) that is directly under the scope and authority fo the SAE Motor Vehicle Council. The SAE Motor Vehicle Council’s stated scope of influence and authority, as defined by the SAE includes, passenger car and light truck in conjunction with ISO/SAE 21434.
Vehicle Electrical System Security Committee
This article proposes a new model for a cooperative and distributed decision-making mechanism for an ad hoc network of automated vehicles (AVs). The goal of the model is to ensure safety and reduce energy consumption. The use of centralized computation resource is not suitable for scalable cooperative applications, so the proposed solution takes advantage of the onboard computing resources of the vehicle in an intelligent transportation system (ITS). This leads to the introduction of a distributed decision-making mechanism for connected AVs. The proposed mechanism utilizes a novel implementation of the resource-aware and distributed–vector evaluated genetic algorithm (RAD-VEGA) in the vehicular ad hoc network of connected AVs as a solver to collaborative decision-making problems. In the first step, a collaborative decision-making problem is formulated for connected AVs as a multi-objective optimization problem (MOOP), with a focus on energy consumption and collision risk reduction as
Ghahremaninejad, RezaBilgen, Semih
The traditional approach to applying safety limits in electromechanical systems across various industries, including automated vehicles, robotics, and aerospace, involves hard-coding control and safety limits into production firmware, which remains fixed throughout the product life cycle. However, with the evolving needs of automated systems such as automated vehicles and robots, this approach falls short in addressing all use cases and scenarios to ensure safe operation. Particularly for data-driven machine learning applications that continuously evolve, there is a need for a more flexible and adaptable safety limits application strategy based on different operational design domains (ODDs) and scenarios. The ITSC conference paper [1] introduced the dynamic control limits application (DCLA) strategy, supporting the flexible application of diverse limits profiles based on dynamic scenario parameters across different layers of the Autonomy software stack. This article extends the DCLA
Garikapati, DivyaLiu, YitingHuo, Zhaoyuan
The extent of automation and autonomy used in general aviation (GA) has been steadily increasing for decades, with the pace of development accelerating recently. This has huge potential benefits for safety given that it is estimated that 75% of the accidents in personal and on-demand GA are due to pilot error. However, an approach to certifying autonomous systems that relies on reversionary modes limits their potential to improve safety. Placing a human pilot in a situation where they are suddenly tasked with flying an airplane in a failed situation, often without sufficient situational awareness, is overly demanding. This consideration, coupled with advancing technology that may not align with a deterministic certification paradigm, creates an opportunity for new approaches to certifying autonomous and highly automated aircraft systems. The new paths must account for the multifaceted aviation approach to risk management which has interlocking requirements for airworthiness and
Dietrich, Anna MracekRajamani, Ravi
“New Space" is reshaping the economic landscape of the space industry and has far-reaching implications for technological innovation, business models, and market dynamics. This change, aligned with the digitalization in the world economy, has given rise to innovations in the downstream space segment. This “servitization” of the space industry, essentially, has led to the transition from selling products like satellites or spacecraft, to selling the services these products provide. This also connects to applications of various technologies, like cloud computing, artificial intelligence, and virtualization. Redefining Space Commerce: The Move Toward Servitization discusses the advantages of this shift (e.g., cost reduction, increased access to space for smaller organizations and countries), as well as the challenges, such as maintaining safety and security, establishing standardization and regulation, and managing risks. The implications of this may be far-reaching, affecting not only
Khan, Samir
In late 2022, the EU Medical Device Regulation (MDR) was expanded by the addition of the common specifications (CS) 2022/20346. The spe00cifications describe the aspects that must be examined for devices without an intended medical purpose. These aspects apply in addition to the classical MDR requirements and include certain aspects of risk management. In other words, even products that only serve aesthetic purposes, such as colored contact lenses, will be assessed in accordance with the strict MDR regulations and, in addition, will have to fulfill the requirements laid down in the CS 2022/2346.
The United Nation Economic Commission for Europe (UNECE) Regulation 155—Cybersecurity and Cybersecurity Management System (UN R155) mandates the development of cybersecurity management systems (CSMS) as part of a vehicle’s lifecycle. An inherent component of the CSMS is cybersecurity risk management and assessment. Validation and verification testing is a key activity for measuring the effectiveness of risk management, and it is mandated by UN R155 for type approval. Due to the focus of R155 and its suggested implementation guideline, ISO/SAE 21434:2021—Road Vehicle Cybersecurity Engineering, mainly centering on the alignment of cybersecurity risk management to the vehicle development lifecycle, there is a gap in knowledge of proscribed activities for validation and verification testing. This research provides guidance on automotive cybersecurity testing and verification by providing an overview of the state-of-the-art in relevant automotive standards, outlining their transposition
Roberts, AndrewMarksteiner, StefanSoyturk, MujdatYaman, BerkayYang, Yi
In autonomous driving vehicles with an automation level greater than three, the autonomous system is responsible for safe driving, instead of the human driver. Hence, the driving safety of autonomous driving vehicles must be ensured before they are used on the road. Because it is not realistic to evaluate all test conditions in real traffic, computer simulation methods can be used. Since driving safety performance can be evaluated by simulating different driving scenarios and calculating the criticality metrics that represent dangerous collision risks, it is necessary to study and define the criticality metrics for the type of driving scenarios. This study focused on the risk of collisions in the confluence area because it was known that the accident rate in the confluence area is much higher than on the main roadway. There have been several experimental studies on safe driving behaviors in the confluence area; however, there has been little study logically exploring the merging
Imaseki, TakashiSugasawa, FukashiKawakami, ErikoMouri, Hiroshi
The content of ARP6328 contains guidance for implementing processes used for risk identification, mitigation, detection, avoidance, disposition, and reporting of counterfeit electrical, electronic, and electromechanical (EEE) parts and assemblies in accordance with AS5553 Revision D. This document may also be used in conjunction with other revisions of AS5553. This document retains guidance contained in the base document of AS5553, updated as appropriate to reflect current practices. This is not intended to stand alone, supersede, or cancel requirements found in other quality management system documents, requirements imposed by contracting authorities, or applicable laws and regulations unless an authorized exemption/variance has been obtained.
G-19 Counterfeit Electronic Parts Committee
Recently, lean manufacturing (LM) practices are being combined with tools and techniques that belong to other areas of knowledge such as risk management (RM). Value stream mapping (VSM) is a well-known tool in showing the value, the value stream, and the flow, which represents the three lean principles. VSM and RM, when used in tandem with one another, are more advantageous in covering VSM issues such as the variability of production processes. In this article, a conceptual model that integrates the two is shown and explained. The model helps to generate scenarios of current state map (CSM) and future state map (FSM) in a dynamic way by identifying current and potential risks. These risks might happen in the future, bringing with it negative ramifications including not reaching the main objectives within the defined time. The model has been tested in a coffee production company belonging to health and food sector. The proposed model specified the ranges of variability through the
Araibi, Alaa SalahuddinShaiful, A. I. M.Shadhar, Mohanad Hatem
A research team has designed a fall-risk assessment system that enables doctors to create personalized risk-management strategies for patients based on their individual movement patterns at home.
This technical report identifies the requirements for an LFCP for ADHP soldered electronic products built fully or partially with Pb-free materials and assembly processes. An LFCP documents the specific Pb-free materials and assembly processes used to assure customers their ADHP soldered electronic products will meet the applicable reliability requirements of the customer. This standard specifically addresses LFCPs for: a Pb-free components and mixed assembly: Products originally designed and qualified with SnPb solder and assembly processes that incorporate components with Pb-free termination finishes and/or Pb-free BGAs, i.e., assembling Pb-free parts using eutectic/near-eutectic SnPb processes (also known as mixed metallurgy). b COTS products: COTS products likely built with Pb-free materials and assembly processes. c Pb-free design and assembly: Products designed and qualified with Pb-free solder and assembly processes. This standard does not include detailed descriptions of the
G-24 Pb-free Risk Management Committee for ADHP
This SAE Aerospace Standard (AS) standardizes practices to identify reliable sources to procure electrical, electronic, and electromechanical (EEE) parts, assess and mitigate the risk of distributing suspect counterfeit or counterfeit EEE parts, control suspect counterfeit or counterfeit EEE parts, and report incidents of suspect counterfeit and counterfeit EEE parts.
G-19 Counterfeit Electronic Parts Committee
Autonomy is a key enabling factor in uncrewed aircraft system (UAS) and advanced air mobility (AAM) applications ranging from cargo delivery to structure inspection to passenger transport, across multiple sectors. In addition to guiding the UAS, autonomy will ensure that they stay safe in a large number of off-nominal situations without requiring the operator to intervene. While the addition of autonomy enables the safety case for the overall operation, there is a question as to how we can assure that the autonomy itself will work as intended. Specifically, we need assurable technical approaches, operational considerations, and a framework to develop, test, maintain, and improve these capabilities. We make the case that many of the key autonomy functions can be realized in the near term with readily assurable, even certifiable, design approaches and assurance methods, combined with risk mitigations and strategically defined concepts of operations. We present specific autonomy functions
Bartlett, PaulChamberlain, LyleSingh, SanjivCoblenz, Lauren
This document establishes the minimum training and qualification requirements for ground-based aircraft deicing/anti-icing methods and procedures. All guidelines referred to herein are applicable only in conjunction with the applicable documents. Due to aerodynamic and other concerns, the application of deicing/anti-icing fluids shall be carried out in compliance with engine and aircraft manufacturers’ recommendations. The scope of training should be adjusted according to local demands. There are a wide variety of winter seasons and differences of the involvement between deicing operators, and therefore the level and length of training should be adjusted accordingly. However, the minimum level of training shall be covered in all cases. As a rule of thumb, the amount of time spent in practical training should equal or exceed the amount of time spent in classroom training.
G-12T Training and Quality Programs Committee
Automotive electronics and enterprise IT are converging and thus open the doors for advanced hacking. With their immediate safety impact, cyberattacks on such systems will endanger passengers. Today, there are various methods of security verification and validation in the automotive industry. However, we realize that vulnerability detection is incomplete and inefficient with classic security testing. In this article, we show how an enhanced Grey-Box Penetration Test (GBPT) needs less test cases while being more effective in terms of coverage and indicating less false positives.
Ebert, ChristofRay, RuschilJohn, JeromeWang, Zhen
DevSecOps evolved to address the need for building in security continuously across the software development lifecycle so that teams could deliver secure applications with speed and quality. Incorporating testing, triage, and risk mitigation earlier in the continuous integration, continuous delivery (CI/CD) workflow prevents the time-intensive, and often costly, repercussions of making a fix post system deployment. This concept is part of “shifting left,” which moves security testing toward developers, enabling them to fix security issues in their code in near real time rather than “bolting on security” toward the end of the development. When development organizations code with security in mind from the outset, it's easier and less costly to catch and fix vulnerabilities before they go too far into production or after release.
DevSecOps evolved to address the need for building in security continuously across the software development lifecycle so that teams could deliver secure applications with speed and quality. Incorporating testing, triage, and risk mitigation earlier in the continuous integration, continuous delivery (CI/CD) workflow prevents the time-intensive, and often costly, repercussions of making a fix post system deployment.
This SAE Aerospace Recommended Practice (ARP) describes a method to measure, track, and characterize the history of powder feedstock when consumed in the production of parts via additive manufacturing (AM). The history captured as part of this ARP includes AM process exposure, feedstock consumption, blending, and losses associated with the totality of the AM workflow. This document also outlines a two-part metric schema for used powder feedstock consequential of its process exposure history. This metric schema also enables aligning risk determination and usage practices for used powder when based on a correlation between tabulated values in the scheme and user-identified metrics. These correlated metrics with schema values may also be used when establishing powder blending workflows or identifying end-of-life for feedstock.
AMS AM Additive Manufacturing Metals
Today’s vehicles provide a wide range of functions. Some offer comfort support for driving scenarios and others offer a higher level of safety to the driver. Increasing complex systems drives the need for reliable engineering to avoid or at least detect and mitigate malfunctions which would lead to any person being injured. Following state of the art for definition, design, and implementation of any system must therefore always be the target. The need to meet stringent safety requirements of the ISO 26262 Standard is presenting new challenges. In particular, the solutions must ensure that automotive electronic systems always operate safely throughout the vehicle life cycle. Functional safety relies on the safety mechanisms within the design that monitor and verify the correct functional operation of the design while the system is in use. The ability of these safety mechanisms to cover the potential faults determines the overall diagnostic coverage of the design. As a solution that
Chiyedu Rajasimha, RashmiArjun, VishwanathGowdra Chandrashekhar, Hemanth
ABSTRACT Product Development (PD) remains a highly uncertain process for both commercial and DoD programs. The presence of multiple stakeholders (e.g., DoD and allied agencies, soldiers/users, PEO, contractors, manufacturing, service, logistics) with varying requirements, preferences, constraints, and evolving priorities make this particularly challenging for the DoD. These risks are well recognized by agencies, and it is widely understood that acquisition is about risk management and not certainties. However, almost all the DoD acquisition processes still require critical reviews, and most importantly, structured decision support for the fuzzy front-end of the acquisition process. What is lacking, are effective decision support tools that explicitly recognize the sequential milestone structure embedded with multi-stakeholder decision making in all acquisition programs. We describe the Resilient Program Management & Development (RPMD) framework to support complex decision making with
Murat, AlperChinnam, Ratna BabuRana, SatyendraRapp, Stephen H.Hartman, Gregory D.Lamb, David A.Agusti, Rachel S.
Data is information that has been recorded in a form or format convenient to move or process. It is important to distinguish between data and the format. The format is a structured way to record information, such as engineering drawings and other documents, software, pictures, maps, sound, and animation. Some formats are open source, others proprietary. Regardless of the format, there are three broad types of data. Table 1 lists these types of data and provides examples. DM, from the perspective of this standard, consists of the disciplined processes and systems utilized to plan for, acquire, and provide management and oversight for product and product-related business data, consistent with requirements, throughout the product and data life cycles. Thus, this standard primarily addresses product data and the business data required for stakeholder collaboration extending through the supply chain during product acquisition and sustainment life cycle. This standard has broader application
EIDM Enterprise Information and Data Management
This standard applies to the aerospace and defense industries and their supply chains.
E-1 Environmental Committee
Coastal and riverine shorelines are dynamic landscapes that change continually in response to environmental forces. The combination of static infrastructure with dynamic and diverse landscapes creates management challenges for navigation, storm damage reduction, and ecosystem health that are exacerbated during natural disasters. The U.S. Army Corps of Engineers (USACE) flood risk management (FRM) mission strives to reduce the nation's flood risk and increase resilience to disasters. FRM is inherently interdisciplinary, requiring accurate identification of environmental, physical, and infrastructure features that can reduce risk from flood and coastal storm disasters.
While battery range and charging times are getting the most attention when it comes to electric vehicle (EV) charging systems, safety and reliability are a critical part of the equation. Using the right current-sensing methodology can go far to address these concerns.
This standard is for use by organizations that procure and integrate EEE parts. These organizations may provide EEE parts that are not integrated into assemblies (e.g., spares and/or repair EEE parts). Examples of such organizations include, but are not limited to: original equipment manufacturers; contract assembly manufacturers; maintenance, repair, and overhaul organizations; value-added resellers; and suppliers that provide EEE parts or assemblies as part of a service. The requirements of this standard are generic. These requirements are intended to be applied (or flowed down as applicable) through the supply chain to all organizations that procure EEE parts and/or systems, subsystems, or assemblies, regardless of type, size, and product provided. The mitigation of counterfeit EEE parts in this standard is risk-based and these mitigation steps will vary depending on the criticality of the application, desired performance and reliability of the equipment/hardware. The requirements
G-19 Counterfeit Electronic Parts Committee
A global survey in December 2020 revealed a preference for surface and air disinfection in automobiles which may have been accelerated by the COVID-19 pandemic. The observed trend towards healthy cars may remain well after the current pandemic. Additionally, new safety features like CO2 gas sensors, antimicrobial fabrics, and enhanced air purifiers have emerged. While automobile air purifiers trap contaminants using cartridge filters, they are not particularly efficient at removing viral particles and create large pressure drops, which must be compensated with larger fans, increasing power requirements and noise in the vehicle cabin. A HVAC system with integrated UVC-LEDs can inactivating viruses, bacteria, and mold. UVC LEDs are desirable because unlike mercury lamps, they do not pose electrical, glass, and chemical hazards. With the recent improvements in UVC LED lifetime and power, UVC LEDs are becoming a better alternative, as highlighted by recent upsurge of successful in air
Randive, RajulMariita, RichardDavis, JamesSchwegler, TimFranchy, MikeKamtekar, SanjayRother, Heiko
Two major steps involved in SOTIF analysis are defining acceptance criteria and estimating the validation target. While acceptance criteria aids in determining if we have an acceptable residual risk corresponding to a hazardous scenario, the validation target specifies the amount of testing effort (in hours or representative miles) that is needed to ensure that the acceptance criteria are met. The current approaches for defining acceptance criteria heavily rely on existing fatality databases or naturalistic driving study data sets. The criterion is selected based on average number of fatalities or crashes per mile or per one hour of operation. The validation target is then calculated based on acceptance criteria. However respective validation targets., are these values really reflecting the acceptable risk criteria and targets? According to statistics, for a given data set and a random sample derived from the dataset, only the mean of population of the data set and the sample can be
Madala, KaushikKrishnamoorthy, JayalekshmiAvalos Gonzalez, CarlosShivkumar, AbhishekSolmaz, Mert
This standard establishes general principles and descriptions of activities which, when performed in a logical and iterative nature, comprise the Product Support Analysis (PSA) process.
LCLS Life Cycle Logistics Supportability
The extent of automation and autonomy used in general aviation (GA) has been accelerating dramatically. This has huge potential benefits for safety given that 75% of accidents in personal and on-demand GA are due to pilot error. However, an approach to certifying autonomous systems that relies on reversionary modes limits their potential to improve safety. Placing a human pilot in a situation where they are suddenly tasked with flying an airplane in a failed situation, often without sufficient situational awareness, is overly demanding. This, coupled with advancing technology that may not align with a deterministic certification paradigm, creates an opportunity for new approaches to certifying autonomous and highly automated aircraft systems. Unsettled Topics in the General Aviation Autonomy Landscape discusses how these new approaches must account for the multifaceted aviation approach to risk management which has interlocking requirements for airworthiness and operations (including
Dietrich, Anna Mracek
According to SAE6906, Force Protection and Survivability (FPS) is the HSI domain that facilitates system operation and personnel safety during and after exposure to hostile situations or environments. Force protection refers to all preventive measures taken to mitigate hostile actions against Department of Defense and DHS (e.g., United States Coast Guard, Customs and Border Patrol, Immigration and Customs Enforcement, etc.) personnel. Survivability denotes the capability of the system and/or personnel manning the system to avoid or withstand manmade hostile environments without suffering an abortive impairment of his/her ability to accomplish its designated mission. Damage due to enemy or fratricidal action, or even equipment failure, will endanger the warfighters' well-being and place them into a life-threatening situation.
G-45 Human Systems Integration
This document contains general criteria for the planning, design, and construction of military and commercial ground based aviation fueling facilities that receive, store, distribute, and dispense liquid aviation turbine fuels at airports to both fixed and rotary wing aircraft.
AE-5C Aviation Ground Fueling Systems Committee
This Standard specifies the Habitability processes throughout planning, design, development, test, production, use and disposal of a system. Depending on contract phase and/or complexity of the program, tailoring of this standard may be applied. The primary goals of a contractor Habitability program include: Ensuring that the system design complies with the customer Habitability requirements and that discrepancies are reported to management and the customer. Identifying, coordinating, tracking, prioritizing, and resolving Habitability risks and issues and ensuring that they are: ○ Reflected in the contractor proposal, budgets, and plans ○ Raised at design, management, and program reviews ○ Debated in Working Group meetings ○ Coordinated with Training, Logistics, and the other HSI disciplines ○ Included appropriately in documentation and deliverable data items Ensuring that Habitability requirements are applied to all personnel environments, including operators, maintainers, trainers
G-45 Human Systems Integration
Items per page:
1 – 50 of 261