Choosing safety: A guide to using probabilistic risk assessment and decision analysis in complex, high-consequence systems

Choosing Safety: A Guide to Using Probabilistic Risk Assessment and Decision Analysis in Complex, High-Consequence Systems

Volumn , Issue , 2008, Pages 1-231

  Frank, Michael V ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84905630355     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4324/9781936331291     Document Type: Book

References (176)

1. About: Economics. 2007. Decision Rules. http://economics.about.com/library/glossary/bldefdecision-rule.htm (accessed May 7, 2007 ).
2. Bedford, T., and R. Cooke . 2001. Probabilistic Risk Assessment: Foundations and Methods. Cambridge, UK: Cambridge University Press.
3. Berger, J.O. 1993. Statistical Decision Theory and Bayesian Analysis, 2nd ed. New York: Springer-Verlag.
4. Frank, M.V., A.G. Adamantiades, and D.M. Ligon . 1981. Choosing among Auxiliary Feedwater System Alternatives. ANS Trans. 39 (December): 730-731.
5. Fullwood, R. 2000. Probabilistic Safety Assessment in the Chemical and Nuclear Industries. Woburn, MA: Butterworth-Heinemann (Elsevier-Reed Publications).
6. Hammond, J.S., R.L. Keeney, and H. Raiffa . 1999. Smart Choices. Boston: Harvard Business School Press.
7. Keeney, R. 1992. Value Focused Thinking. Cambridge, MA: Harvard University Press.
8. Keeney, R., and H. Raiffa . 1976. Decisions with Multiple Objectives: Preferences and Value Trade-offs. New York: Cambridge University Press.
9. Kumamoto, H., and E.J. Henley . 1996. Probabilistic Risk Assessment and Management for Engineers and Scientists, 2nd ed. Piscataway, NJ: IEEE Press.
10. Saaty, T.L. 1990. The Analytic Hierarchy Process. Pittsburgh, PA: RWS Publications.
11. Apostolakis, G. 1994. A Commentary on Model Uncertainty. In Proceedings of Workshop I in Advanced Topics in Risk and Reliability Analysis. Model Uncertainty: Its Characterization and Quantification, edited by A. Mosleh, N. Siu, C. Smidts, and C. Lui . NUREG/CP-0138. Washington, DC: U.S. Nuclear Regulatory Commission (NRC), 13-22.
12. Howard, R. A. 1988. Uncertainty about Probability: A Decision Analysis Perspective. Risk Analysis 8(1).
13. Kaplan, S., and B.J. Garrick . 1981. On the Quantitative Definition of Risk. Risk Assessment 1(1): 11-27.
14. Kletz, T. 1994. What Went Wrong: Case Histories of Process Plant Disasters, 2nd ed. Houston, TX: Gulf Publishing.
15. NRC. 1988. Safety Goals for the Operations of Nuclear Power Plants; Policy Statement. Title 10, U.S. Code of Federal Regulations, Part 50, November 30.
16. Acosta, C., and N. Sui . 1993. Dynamic Event Trees in Accident Sequence Analysis: Application to Steam Generator Tube Rupture. Reliability Engineering and System Safety 41(2): 135-154.
17. ANS (American Nuclear Society) and IEEE (Institute of Electrical and Electronics Engineers). 1983. PRA Procedures Guide. NUREG/CR-2300. Washington, DC: U.S. Nuclear Regulatory Commission (U.S. NRC).
18. Apostolakis, G. 1981. Bayesian Methods in Risk Assessment. In Advances in Nuclear Science and Technology. Edited by J. Lewins and M. Becker . New York: Plenum Press.
19. Apostolakis, G. 1988. Expert Judgment in Probabilistic Safety Assessment, Accelerated Life Testing and Expert's Opinions in Reliability. Edited by C.A. Clarotti and D.V. Lindley . Corso, Italy: Società Italiana di Fisica.
20. Bedford, T., and R. Cooke . 2001. Probabilistic Risk Assessment: Foundations and Methods. Cambridge, UK: Cambridge University Press.
21. Bowman, W.C., and N. Leveson . 1991. An Application of Fault Tree Analysis to Safety Critical Software at Ontario Hydro. In Probabilistic Safety Assessment and Management. Edited by G. Apostolakis . New York: Elsevier, 363-368.
22. Cooke, R.M. 1991. Experts in Uncertainty: Opinion and Subjective Probability in Science. Oxford, UK: Oxford University Press.
23. De Morgan, A. 1847. Formal Logic. London: Taylor and Walton.
24. Denson, W., G. Chandler, W. Crowell, A. Clark, and P. Jaworski . 1995. Non-Electronic Part Reliability Data 1995. Rome, NY: Reliability Analysis Center (RAC).
25. Denson, W., W. Crowell, P. Jaworski, and D. Mahar . 1997a. Failure Mode/Mechanism Distributions 1997. Rome, NY: RAC.
26. Denson, W., W Crowell, P. Jaworski, and D. Mahar . 1997b. Electronic Parts Reliability Data: A Compendium of Commercial and Military Device Field Failure Rates. Rome, NY: RAC.
27. Devooght, J., and C. Smidts . 1993. Probabilistic Dynamics: The Mathematical and Computing Problems Ahead. In Reliability and Safety Assessment of Dynamic Process Systems. Edited by T. Aldemir, N. Sui, A. Mosleh, PC. Cacciabue, and G. Goktepe . New York: Springer-Verlag.
28. DoD (U.S. Department of Defense). 1991. Military Handbook Reliability Prediction of Electronic Equipment. Mil-Hdbk-217F. Washington, DC: DoD.
29. Dougherty, E.M., Jr . and J.R. Fragola . 1988. Human Reliability Analysis. New York: John Wiley and Sons.
30. Dunn, W., M. Frank, S.A. Epstein, and L. Doty . 1994. Risk Assessment and Management of Safety-Critical, Digital Industrial Controls-Present Practices and Future Challenges. In Proceedings of International Conference on Probabilistic Safety Assessment & Management (PSAM-II). March 20-25, San Diego, California.
31. Embrey, D.E., P. Humphrys, E.A. Rosa, B. Kirwan, and K. Rea . 1984. SLIM-MAUD. An Approach to Assessing Human Error Probabilities Using Structured Expert Judgment. NUREG/CR-3518. Washington, DC: U.S. NRC.
32. Fleming, K.N. 1975. A Reliability Model for Common Mode Failures in Redundant Safety Systems. In Proceedings of the Sixth Annual Conference on Modeling and Simulation.
33. Fleming, K.N., and A.M. Kalinowski . 1983. An Extension of the Beta Factor Method for Systems with High Levels of Redundancy. PLG-0289. Newport Beach, CA: PLG.
34. Fleming, K.N., and S.B. Rao . 1992. A Database of Common Cause Events for Risk and Reliability Applications. EPRI TR-100382. Palo Alto, CA: Electric Power Research Institute (EPRI).
35. Frank, M. 1989. Quantitative Risk Assessment of a Space Shuttle Subsystem. In Proceedings of PSA '89 International Topical Meeting-Probability, Reliability, and Safety Assessment. Washington DC: American Nuclear Society.
36. Frank, M. 1999. Treatment of Uncertainties in Space Nuclear Risk Assessment with Examples from Cassini Mission Applications. Reliability Engineering and System Safety 66: 203-221.
37. Frank, M., M. Weaver, and R. Baker . 2005. A Probabilistic Paradigm for Spacecraft Random Reentry Disassembly. Reliability Engineering and System Safety 90(2-3): 148-161.
38. Gertman, D., and H. Blackman . 1994. Human Reliability and Safety Analysis Data Handbook. New York: John Wiley & Sons.
39. Hall, R.E., J. Fragola, and J. Wreathall . 1982. Post-event Human Decision Errors: Operator Action Trees/Time Reliability Correlations. NUREG/CR-3010. Washington, DC: U.S. NRC.
40. Hannaman, G., and A. Spurgin . 1984. Systematic Human Action Reliability Procedure (SHARP). EPRI NP-3583. Palo Alto, CA: EPRI.
41. Hollnagel, E. 1993. Human Reliability Analysis: Context and Control. London: Academic Press.
42. Hollnagel, E. 1998. Cognitive Reliability and Error Analysis Method: CREAM. London: Elsevier Science.
43. Kahneman, D., P. Slovic, and A. Tversky (eds.). 1982. Judgment under Uncertainty: Heuristics and Biases. New York: Cambridge University Press.
44. Kumamoto, H., and E.J. Henley . 1996. Probabilistic Risk Assessment and Management for Engineers and Scientists, 2nd ed. Piscataway, NJ: IEEE Press.
45. Leveson, N. 1994. Software Safety Analysis. In Proceedings of the High Consequence Operations Safety Symposium. SAND94-2364. Albuquerque, NM: Sandia National Laboratory.
46. Leveson, N. 1995. Safeware: System Safety and Computers. New York: Addison-Wesley.
47. Lockheed Martin. 1997. General Purpose Heat Source-Radioisotope Thermoelectric Generators in Support of the Cassini Mission Final Safety Analysis Report (FSAR). CDRL C.3. Valley Forge, PA: Lockheed Martin Missiles and Space, Valley Forge Operations.
48. Marshall, F.M., A. Mosleh, and D.M. Rasmussen . 1998a. Common Cause Failure Database and Analysis System, Volumes 1-4. NUREG/CR-6268. Washington, DC: U.S. NRC.
49. Marshall, F.M., A. Mosleh, and D.M. Rasmussen . 1998b. Common Cause Failure Parameter Estimations. NUREG/CR-5497. Washington, DC: U.S. NRC.
50. Milici, A., J.-S. Wu, and G. Apostolakis . 1996. The Use of the Dynamic Flowgraph Methodology in Modeling Human Performance and Team Effects. In Probabilistic Safety Assessment and Management. Volume 1. New York: Springer-Verlag.
51. Modarres, M. 1992. What Every Engineer Should Know about Reliability and Risk Assessment. Boca Raton, FL: CRC Press.
52. Mosleh, A., V.M. Bier, and G. Apostolakis . 1987. Methods for the Elicitation and Use of Expert Opinion in Risk Assessment. NUREG/CR-4962. Washington, DC: U.S. NRC.
53. Mosleh, A., K. Fleming, and G. Parry, et al. 1988. Procedures for Treating Common Cause Failures in Safety and Reliability Studies. NUREG/CR-4780. Washington, DC: U.S. NRC.
54. Mosleh, A., D.M. Rasmuson, and F.M. Marshall . 1998. Guidelines on Modeling Common Cause Failures in Probabilistic Risk Assessment. NUREG/CR-5485. Washington, DC: U.S. NRC.
55. Musa, J., A. Iannino, and K. Okumoto . 1990. Software Reliability: Measurement, Prediction, Application. New York: McGraw Hill.
56. NSWC (Naval Surface Warfare Center). 1998. Handbook of Reliability Prediction Procedures for Mechanical Equipment. NSWC LE1. West Bethesda, MD: Naval Surface Warfare Center, Carderock Division.
57. Parnas, D.L., A. J. van Schouwen, and S.P. Kwan . 1990. Evaluation of Safety Critical Software. Communications of the Association of Computing Machinery 33(6): 636-648.
58. Rasmuson, D.M., A. Mosley, and F. Marshall . 1998. Some General Insights from the USNRC's Common Cause Database. In Probabilistic Safety Assessment and Management: PSAM 4. Edited by A. Mosley and R.A. Bari . New York: Springer-Verlag, 195-199.
59. Reason, J. 1997. Managing the Risks of Organizational Accidents. Hampshire, UK: Ashgate Publishing.
60. D.I. Gertman, W.E. Gilmore, W.J. Galyean, et al. 1988. Nuclear Computerized Library for Assessing Reactor Reliability (NUCLARR). NUREG/CR-4639. Washington, DC: U.S. NRC.
61. Shooman, M. 1983. Software Engineering. New York: McGraw Hill.
62. Shooman, M.L., and S. Sinkar . 1977. Generation of Reliability and Safety Data by Analysis of Expert Opinion. In Annual Reliability and Maintainability Symposium. New York: IEEE, 186-193.
63. Siu, N. 1994. Risk Assessment for Dynamic Systems: An Overview. Reliability Engineering and System Safety 43: 43-73.
64. Spurgin, A., and P. Moieni . 1991. Interpretation of Simulator Data in the Context of Human Reliability Modeling. In Probabilistic Safety Assessment and Management. Edited by G. Apostolakis . New York: Elsevier.
65. Swain, A., and H. Guttman . 1982. Handbook of Human Reliability Analysis with Emphasis on Nuclear Power Plant Applications. NUREG/CR-1278. Washington, DC: U.S. NRC.
66. Telcordia Technologies. 2001. Reliability Prediction Procedure for Electronic Equipment. SR-332, Issue 1, May. Piscataway, NJ: Telcordia.
67. Tregoning, R., L. Abramson, and P. Scott . 2005. Estimating Loss-of-Coolant Accident (LOCA) Frequencies through the Elicitation Process. NUREG-1829. Washington, DC: U.S. NRC. U.S. NRC.
68. U.S. NRC. 1999. Technical Basis and Implementation Guidelines for a Technique for Human Event Analysis (ATHEANA). NUREG-1624, Revision 1. Washington, DC: U.S. NRC.
69. Allais, M. 1953. Le comportement de l'homme rationnel devant le risque, critique des postulats et axiomes de l'école Américaine. Econometrica 21: 503-546.
70. Barzilai, J. 2001. Notes on the Analytic Hierarchy Process. Proceedings of the NSF Design and Manufacturing Research Conference, Tampa, Florida, 1-6. Available at http://myweb.dal.ca/barzilai/papers/AHP%20Notes%202001.pdf (accessed June 9, 2007 ).
71. Barzilai, J., and B. Golany . 1994. AHP Rank Reversal, Normalization and Aggregation Rules. INFOR 3: 57-64.
72. Barzilai, J., and F.A. Lootsma . 1997. Power Relations and Group Aggregation in the Multiplicative AHP and SMART. Journal of Multi-Criteria Decision Analysis (6)3: 155-165.
73. Bedford, T., and R. Cooke . 2001. Probabilistic Risk Assessment: Foundations and Methods. Cambridge, UK: Cambridge University Press.
74. Belton, V., and T. Gear . 1982. On a Shortcoming of Saaty's Method of Analytic Hierarchies. Omega 11(3): 228-230.
75. Bridgeman, P.W. 1922. Dimensionless Analysis. New Haven, CT: Yale University Press.
76. DoD (Department of Defense). 1980. Military Standard, Procedures for Performing a Failure Mode, Effects, and Criticality Analysis. Mil-Std-1629A. Washington, DC: DoD.
77. Dyer, J.S. 1990. Remarks on the Analytic Hierarchy Process. Management Science 36(3): 249-258.
78. Ellsberg, D. 1961. Risk, Ambiguity, and the Savage Axioms. Quarterly Journal of Economics 75: 643-669.
79. Fox, C.R., and A. Tversky . 1995. Ambiguity Aversion and Comparative Ignorance. Quarterly Journal of Economics 110(2): 585-603.
80. Frank, M. 1995. Choosing Among Safety Improvement Strategies: A Discussion with Example of Risk Assessment and Multi-Criteria Decision Approaches for NASA. Reliability Engineering and System Safety 49(3): 311-324.
81. Hammond, J., R. Keeney, and H. Raiffa . 1999. Smart Choices: A Practical Guide to Making Better Decisions. Boston: Harvard Business School Press.
82. Howard, R. 1988. Uncertainty about Probability: A Decision Analysis Perspective. Risk Assessment 8(1): 91-98.
83. Hwang, C.L., and K. Yoon . 1981. Multiple Attribute Decision Making: Methods and Applications. Berlin: Springer-Verlag.
84. Kahneman, D., and A. Tversky . 1979. Prospect Theory: An Analysis of Decision under Risk. Econometrica XLVII: 263-291.
85. Keeney, R. 1992. Value-Focused Thinking: A Path to Creative Decision-making. Cambridge, MA: Harvard University Press.
86. Keeney, R., and H. Raiffa . 1976. Decisions with Multiple Objectives: Preferences and Value Trade-offs. New York: Cambridge University Press.
87. Kirkwood, C. 1991. Notes on Attitude Toward Risk Taking and the Exponential Utility Function. http://www.public.asu.edu/~kirkwood/DAStuff/refs/risk.pdf (accessed June 9, 2007 ).
88. Kirkwood, E. 2002. Decision Tree Primer. www.public.asu.edu/~kirkwood/DAStuff/decision-trees/DecisionTreePrimer-2.pdf (accessed June 9, 2007 ).
89. Li, S. 1996. An Additional Violation of Transitivity and Independence Between Alternatives. Journal of Economic Psychology 17: 645-650.
90. Lootsma, F.A. 1999. Multi-Criteria Decision Analysis via Ratio and Difference Judgment (Applied Optimization). Dordrecht, the Netherlands: Kluwer Academic Publishers.
91. Luce, R.D., and H. Raiffa . 1957. Games and Decisions. New York: John Wiley & Sons.
92. McCool, A.A. 1991. Space Shuttle Solid Rocket Motor Program, Lessons Learned. AIAA Paper #91-2291-CP. Atlanta, GA: George C. Marshall Space Flight Center.
93. Miller, D.W., and M.K. Starr . 1969. Executive Decisions and Operations Research. Englewood Cliffs, NJ: Prentice-Hall, Inc.
94. Quiggin, J. 1993a. Testing Between Alternative Models of Choice Under Uncertainty-Comment. Journal of Risk and Uncertainty 6(2): 161-164.
95. Quiggin, J. 1993b. Generalized Expected Utility Theory: The Rank-Dependent Model Boston: Kluwer Academic Publishers.
96. Roy, B. 1978. Electre III: Un algorithme de classements fondé sur une représentation floue des préférences en présence de critères multiples. Cahiers du Centre d'Etudes de Recherche Opérationnelle (Belgique) 20(1): 3-24.
97. Saaty, T. 1990. Multicriteria Decision Making: The Analytic Hierarchy Process. AHP Series, Vol. 1. Pittsburgh, PA: RWS Publications.
98. Saaty, T. 2000. Fundamentals of Decision Making and Priority Theory with the Analytic Hierarchy Process. AHP Series, Vol. 6. Pittsburgh, PA: RWS Publications.
99. Saaty, T. 2005. Making and Validating Complex Decisions with the AHP/ANP. Journal of Systems Science and Systems Engineering 14(1) March: 1-36.
100. Saaty, T.L. 1980. The Analytic Hierarchy Process. New York: McGraw-Hill.
101. Saaty, T.L., and L.G. Vargas . 1984. Inconsistency and Rank Preservation. Journal of Mathematical Psychology 28(2): 205-214.
102. Schmid, S. 1994. The ESA Risk Management Decision Analysis Method: Application Procedure Report prepared under European Space Research and Technology Center contract, Technology International Corporation. December.
103. Schuyler, J. 2001. Risk and Decision Analysis in Projects, 2nd ed. Newton Square, PA: Project Management Institute.
104. Shachter, R. 1988. Probabilistic Inference and Influence Diagrams. Operations Research 36: 589-604.
105. Triantaphyllou, E. 2000. Multi-Criteria Decision Making Methods: A Comparative Study. Boston: Kluwer Academic Publishers.
106. Tversky, A., and D. Kahneman . 1992. Advances in Prospect Theory: Cumulative Representation of Uncertainty. Journal of Risk and Uncertainty 5: 297-323.
107. von Neumann, J., and O. Morgenstern . 1944. The Theory of Games and Economic Behavior, 2nd ed. Princeton, NJ: Princeton University Press.
108. von Winterfeldt, D., and W. Edwards . 1986. Decision Analysis and Behavioral Research. Cambridge, UK: Cambridge University Press.
109. Wang, X., and E. Triantaphyllou . 2006. Ranking Irregularities When Evaluating Alternatives by Using Some Multi-Criteria Decision Analysis Methods. Handbook of Industrial and Systems Engineering. Edited by A. Badiru . Boca Raton, FL: CRC Press.
110. Covello, V.T., and F. Allen . 1988. Seven Cardinal Rules of Risk Communication. Washington, DC: U.S. Environmental Protection Agency.
111. Fisher, A.M., S. Emani, and M.T. Zint . 1995. Risk Communication for Industry Practitioners: An Annotated Bibliography. McLean, VA: Society of Risk Assessment, Risk Communication Specialty Group.
112. Morgan, M.G. 1993. Risk Assessment and Management. Scientific American (July): 40-41.
113. NRC (National Research Council). 1989. Improving Risk Communication. Washington, DC: National Academy Press.
114. Sandman, P.M. 1986. Explaining Environmental Risk. Washington, DC: U.S. Environmental Protection Agency.
115. Swain, A., and H. Guttman . 1982. Handbook of Human Reliability Analysis with Emphasis on Nuclear Power Plant Applications. NUREG/CR-1278. Washington, DC: U.S. Nuclear Regulatory Commission.
116. MDAC (McDonnell Douglas Astronautics Company). 1987. Space Shuttle Probabilistic Risk Assessment Proof-of-Concept Study Volume III. WP NO. 1.0-WP-VA88004-03. Houston, TX: MDAC.
117. NASA. 1993. Space Shuttle Operational Flight Rules, National Aeronautics and Space Administration, Mission Operations Directorate. NSTS-12820, PCN-19. Houston, TX: Johnson Space Center.
118. Nelson, P.F., and W.E. Kastenberg . 1986. An Extended Value-Impact Approach for Nuclear Regulatory Decision-making. In Nuclear Engineering and Design, Vol. 93. New York: Elsevier, 311-317.
119. U.S. Congress. 1989. Round Trip to Orbit: Human Spaceflight Alternatives-Special Report. OTA-ISC-419. Washington, DC: U.S. Congress Office of Technology Assessment.
120. Baker, R., and D. Nelson . 1998. Radioisotope Thermal Generator Survivability for Earth Reentries. Proceedings of the International Conference on Probabilistic Safety and Management (PSAM4). New York: Springer-Verlag.
121. Frank, M.V. 2000. Probabilistic Analysis of the Inadvertent Reentry of the Cassini Spacecraft's Radioisotope Thermoelectric Generators. Risk Assessment 20(2): 251-260.
122. Hanafee, J.E. 1978. Analysis of Beryllium Parts for Cosmos 954. UCRL-52597. Livermore, CA: Lawrence Livermore Laboratory.
123. Hobbs, R.B. 1973. MHW-HSA Aerodynamic Performance Test Report. Data memo 9151-001. Valley Forge, PA: General Electric Company, Re-Entry Systems Department, Aerothermodynamics Engineering Laboratory.
124. INSRP (Interagency Nuclear Safety Review Panel). 1990. Biomedical and Environmental Effects Working Group Report for Ulysses. INSRP 90-06. Washington, DC: INSRP.
125. INSRP (Interagency Nuclear Safety Review Panel). 1997. Supporting Technical Studies Prepared for the Cassini Mission Interagency Nuclear Safety Review Panel Safety Evaluation Report.
126. JPL (Jet Propulsion Laboratory). 1993. Cassini Program Environmental Impact Statement Supporting Study. Vol. 3: Cassini Earth Swingby Plan. JPL D-10178-3. Pasadena, CA: JPL.
127. JPL (Jet Propulsion Laboratory). 1997. Cassini Earth Swingby Plan Supplement. JPL D-10178-3. Pasadena, CA: JPL.
128. Lockheed Martin. 1997. General Purpose Heat Source-Radioisotope Thermoelectric Generators in Support of the Cassini Mission Final Safety Analysis Report (FSAR). CDRL C.3. Valley Forge, PA: Lockheed Martin Missiles and Space Company.
129. NASA. 1995. Final Environmental Impact Statement for the Cassini Mission. Washington, DC: NASA.
130. NASA. 1997. Final Supplemental Environmental Impact Statement for the Cassini Mission. Washington, DC: NASA.
131. NSAM (National Security Action Memorandums). 1963. Large-Scale Scientific or Technological Experiments with Possible Adverse Environmental Effects. NSAM 235, April 17. Available online at http://www.fas.org/irp/offdocs/nsam-jfk/nsam-235.htm (accessed June 7, 2007 ).
132. NSAM (National Security Action Memorandums). 1961. NSAM 50, May 12, 1961. Available online at http://www.jfklibrary.org/Historical+Resources/Archives/Reference+Desk/NSAMs.htm (accessed June 10, 2007 )
133. NSC (National Security Council). 1977. Scientific or Technological Experiments with Possible Large-Scale Adverse Environmental Effects and Launch of Nuclear Systems into Space. Presidential Directive. PD/NSC-25. December 14. Available online at http://www.fas.org/irp/offdocs/pd/pd25.pdf (accessed June 10, 2007 ). Updated by Revision to PD/NSC-25, dated December 14, 1977, entitled Scientific or Technological Experiments with Possible Large-Scale Adverse Environmental Effects and Launch of Nuclear Systems into Space, May 8, 1996.
134. Dunn, W.R. 1986. Software Reliability: Measures and Effects in Flight Critical Digital Avionics Systems. Proceedings of the 7th Digital Avionic Conference, October 1986. Fort Worth, TX: Institute for Electronic and Electrical Engineers/American Institute of Avionics and Astronautics.
135. Dunn, W.R., M.V. Frank, S.A. Epstein, and L. Doty . 1994. Risk Assessment and Management of Safety-Critical, Digital Industrial Controls-Present Practices and Future Challenges. In Proceedings of the PSAM-II. San Diego, CA: International Association for Probabilistic Safety Assessment and Management, 003-1-003-6.
136. Jaynes, E.T. 1957. Information Theory and Statistical Mechanics. Physical Review 106: 620-630.
137. ANS (American Nuclear Society). 2005. Price Anderson Act Background Information, American Nuclear Society, November, http://www.ans.org/pi/ps/docs/ps54-bi.pdf (accessed June 12, 2007 ).
138. ANS (American Nuclear Society). 2006. http://www.ans.org/pi/resources/sptopics/tmi/cleanup.html (accessed June 12, 2007 ).
139. BBC. 1998. http://news.bbc.co.uk/72/hi/world/monitoring/83969.stm (accessed June 12, 2007 ).
140. Callan, J. 1997. Memorandum from L. Joseph Callan to the Commissioners, Response to Staff Requirements Memorandum of May 28, 1997, Concerning Briefing on IPE Insight Report, SECY-97-180, August 6.
141. Eide, S.A., C.D. Gentillon, T.E. Wierman, and D.M. Rasmuson . 2005. Reevaluation of Station Blackout Risk at Nuclear Power Plants. NUREG/CR-6890. Washington, DC: U.S. Nuclear Regulatory Commission (U.S. NRC).
142. EPRI (Electric Power Research Institute) and ERIN Engineering and Research, Inc. 1992. Severe Accident Issue Closure Guidelines. NUMARC 91-04. Washington, DC: Nuclear Management and Resources Council.
143. Hahn, R.W. 1996. Risks, Costs, and Lives Saved: Getting Better Results from Regulation. Washington, DC: American Enterprise Institute (AEI).
144. Hanson, D.J., D.W. Golden, R. Chambers, J.D. Miller, B.P. Hallbert, and C.A. Dobbe . 1990. Depressurization as an Accident Management Strategy to Minimize the Consequences of Direct Containment Heating. NUREG/CR-5447. Washington, DC: U.S. NRC.
145. Hanson, D.J., S.P. Johnson, H.S. Blackman, and M.A. Stewart . 1991. A Systematic Process for Developing and Assessing Accident Management Plans. NUREG/CR-5543. Washington, DC: U.S. NRC.
146. IAEA (International Atomic Energy Agency). 2005. Chernobyl's Legacy: Health, Environmental and Socio-economic Impacts and Recommendations to the Governments of Belarus, the Russian Federation and Ukraine. The Chernobyl Forum: 2003-2005. 2nd rev. http://www.iaea.org/Publications/Booklets/Chernobyl/chernobyl.pdf (accessed June 12, 2007 ).
147. Kastenberg, W.E., editor. 1991. Summary of a Workshop on Severe Accident Management for PWRs. NUREG/CR-5781. Washington, DC: U.S. NRC.
148. Kastenberg, W.E., editor. 1993. A Framework for the Assessment of Severe Accident Management Strategies. NUREG/CR-6056. Washington, DC: U.S. NRC.
149. Lutter, R., J.F. Morrall, III, and W.K. Viscusi . 2006. The Cost-per-Life-Saved Cutoff for Safety-enhancing Regulations. Economic Inquiry 37(4): 599. Available online at http://ei.oxfordjournals.org/cgi/content/abstract/37/4/599 (accessed June 12, 2007 ).
150. NRC (Nuclear Regulatory Commission). 1975. Reactor Safety Study. NUREG 75/014 (WASH-1400). Washington, DC: U.S. NRC.
151. NRC (Nuclear Regulatory Commission). 1985. Policy Statement on Severe Reactor Accidents Regarding Future Designs and Existing Plants. Federal Register 50(153): 32138, August 8.
152. NRC (Nuclear Regulatory Commission). 1988. Safety Goals for the Operations of Nuclear Power Plants; Policy Statement. Title 10, U.S. Code of Federal Regulations, Part 50. November 30.
153. NRC (Nuclear Regulatory Commission). 1989. Individual Plant Examination: Submittal Guidance. NUREG-1335. Washington, DC: U.S. NRC.
154. NRC (Nuclear Regulatory Commission). 1990. Severe Accident Risks: An Assessment for Five U.S. Nuclear Power Plants. NUREG-1150. Washington, DC: U.S. NRC.
155. NRC (Nuclear Regulatory Commission). 1991. Procedural and Submittal Guidance for the Individual Plant Examination of External Events (IPEEE)for Severe Accident Vulnerabilities. NUREG-1407. Washington, DC: U.S. NRC.
156. NRC (Nuclear Regulatory Commission). 1995. Reassessment of NRC's Dollar per Person-Rem Conversion Factor Policy. NUREG-1530. Washington, DC: U.S. NRC.
157. NRC (Nuclear Regulatory Commission). 2002. Office of the General Counsel, U.S. Nuclear Regulatory Commission. Nuclear Regulatory Legislation, 107th Congress, 1st Session. NUREG-0980, 1(6): June.
158. NRC (Nuclear Regulatory Commission). 2004. Regulatory Analysis Guidelines of the U.S. Nuclear Regulatory Commission. NUREG/BR-0058 Rev. 4. Washington, DC: U.S. NRC.
159. NRC (Nuclear Regulatory Commission). 2006a. Domestic Licensing of Production and Utilization Facilities, Title 10, U.S. Code of Federal Regulations, Part 50.
160. NRC (Nuclear Regulatory Commission). 2006b. NRC Regulatory Guides-Power Reactors (Division 1). Available online at http://www.nrc.gov/reading-rm/doc-collections/reg-guides/power-reactors/active (accessed June 12, 2007 ).
161. NRC (Nuclear Regulatory Commission). 2006c. Three Mile Island, Unit 2. Available online at http://www.nrc.gov/info-finder/decommissioning/power-reactor/three-mile-island-unit-2.html (accessed June 12, 2007 ).
162. U.S. EPA (Environmental Protection Agency). 1992. Technical Support Document for the 1992 Citizen's Guide to Radon. EPA 400-R-92-011. Washington, DC: U.S. EPA.
163. Wilson, R. 2000. Regulating Environmental Hazards. Regulation 23(1): 33.
164. ASN (Aviation Safety Network). 1996-2007. Accident description available online at http://aviation-safety.net/database/record.php?id=19740303-1 (accessed June 11, 2007 ). With reference to International Civil Aviation Organization (ICAO) Circular 132-AN93: 116-125.
165. CAIB (Columbia Accident Investigation Board). 2003. Report by the Columbia Accident Investigation Board. http://caib.nasa.gov/ (accessed June 13, 2007 ).
166. De Morgan, A. 1847. Formal Logic. London: Taylor and Walton.
167. Hammond, J.S., R.L. Keeney, H. Raiffa . 1999. Smart Choices, Harvard Business School Press, Boston, MA, 2.
168. HSE (Health and Safety Executive). 1975. The Flixborough Disaster: Report of the Court of Inquiry. HMSO, ISBN 0113610750. Available online at http://www.hse.gov.uk/comah/sragtech/caseflixboroug74.htm (accessed June 11, 2007 ).
169. Kletz, T. 1994. What Went Wrong: Case Histories of Process Plant Disasters, 2nd ed. Houston, TX: Gulf Publishing.
170. Lapierre, D., and J. Moro . 2002. Five Past Midnight in Bhopal. New York: Warner Books.
171. Leveson, N. 1995. Safeware: System Safety and Computers. New York: Addison-Wesley.
172. MDAC (McDonnell Douglas Astronautics Company). 1987. Space Shuttle Probabilistic Risk Assessment Proof-of-Concept Study Volume III. WP NO. 1.0-WP-VA88004-03. Houston, TX: MDAC.
173. OECD (Organization for Economic Cooperation and Development). 2002. Chernobyl: An Assessment of Radiological and Health Impact: 2002 update of Chernobyl: 10 years on. Nuclear Energy Agency, Organization for Economic Co-operation and Development, 2002.
174. Presidential Commission on the Space Shuttle Challenger Accident. 1986. Report of the Presidential Commission on the Space Shuttle Challenger Accident. Executive Order 12546, February 3. Available online at http://history.nasa.gov/rogersrep/genindex.htm (accessed June 12, 2007 ).
175. Saaty, T.L., and E.H. Forman . 1993. The Hierarchon. The Analytic Hierarchy Process Series. Vol. 5. Pittsburgh, PA: RWS Publications.
176. Thompson, Sir William Kelvin, Lord. 1889. Electrical Units of Measurement. Popular Lectures and Addresses (PLA). London: MacMillan.