Reliability Engineering and System Safety
Reliability Engineering and System Safety
a r t i c l e i n f o abstract
Available online 12 January 2011 Asset managers in electricity distribution companies generally recognize the need and the challenge of
Keywords: adding structure and a higher degree of formal analysis into the increasingly complex asset manage-
Risk analysis ment decisions. This implies improving the present asset management practice by making the best use
Multi-criteria decision analysis under of the available data and expert knowledge and by adopting new methods for risk analysis and decision
uncertainty support and nevertheless better ways to document the decisions made.
Electricity distribution system asset This paper discusses methods for integrating risk analysis and multi-criteria decision support under
management uncertainty in electricity distribution system asset management. The focus is on how to include the
different company objectives and risk analyses into a structured decision framework when deciding
how to handle the physical assets of the electricity distribution network.
This paper presents an illustrative example of decision support for maintenance and reinvestment
strategies based, using expert knowledge, simplified risk analyses and multi-criteria decision analysis
under uncertainty.
& 2011 Elsevier Ltd. All rights reserved.
0951-8320/$ - see front matter & 2011 Elsevier Ltd. All rights reserved.
doi:10.1016/j.ress.2010.12.028
664 M.D. Catrinu, D.E. Nordgård / Reliability Engineering and System Safety 96 (2011) 663–670
present asset management practice by making the best use of classifications exist for uncertainty in decision making. For
available data and expert knowledge about the system and the example, in [14] two uncertainty aspects are discussed: ‘external’
assets. This in turn requires adopting new methods for risk analysis uncertainty and ‘internal’ uncertainty.
and decision support and nevertheless better ways to document the The ‘external’ uncertainty refers to the lack of knowledge about
decisions made. the consequences of a particular choice (decision). In this paper, we
Based on the work presented at the ESREL conference in 2009 consider that external uncertainty resides in the estimation of the
[13], this paper focuses on the issue of offering decision support in problem ‘data’, for example: probabilities and consequences. In this
distribution system asset management by discussing methods category we would like to include two sub-types:
and illustrating an approach for integrating risk analysis and
multi-criteria decision support under uncertainty. (a) Uncertainty that arises because of natural, unpredictable
In this paper, the use of such methods is motivated by a dis- variations associated with the system or the environment—
cussion on the criteria, risks and uncertainty aspects in distribution aleatory uncertainty. This type of uncertainty is outside
system asset management decisions. Section 3 briefly presents the control of the decision maker, e.g. the 100 years big
some of the available theoretical approaches for risk and multi- storm, variations in the material fatigue in specific system
criteria decision support, the focus being on how different methods components, etc.
allow the representation of uncertainty in modelling the decision (b) Uncertainties that stems from lack of knowledge about
problem and decision maker’s preferences. This paper brings different phenomena—epistemic uncertainty. This uncer-
forward a little explored application domain for these methods. tainty resides from the lack of data to characterize the system
In Section 4 a case study is presented to illustrate the use of an or component failure, the lack of understanding and proper
integrated approach for risk and multiple criteria assessment in modelling of asset deterioration processes, the poor under-
designing maintenance and reinvestment strategies for 12 kV MV standing of failure interdependencies in the system (physical
air insulated switch-disconnectors. The case illustrates common or other phenomena) or the poor understanding of initiating
decision situations encountered by asset managers in distribution events.
companies. Their challenge is to make decisions based on rather
limited information and modelling possibilities and mostly rely-
The ‘internal’ uncertainty can be described as ambiguity or
ing on expert opinion and limited statistical and economic data.
imprecision in decision making and most of it is due to the
The focus is on emphasising various aspects relevant for practical
uncertainty in problem ‘data’. It reflects the imprecision in human
decision support using different methods, rather than discussing
judgements: preferences, values and risk attitudes. This uncer-
theoretical background conditions for value (choice) modelling.
tainty can stem from insufficient problem understanding, insuffi-
Section 5 offers a discussion of the limitations, advantages and
cient data, insufficient modelling, little acceptance of modelling
challenges of the approach proposed, and some conclusions.
assumptions, etc.
Under many circumstances it is difficult (if not impossible) to
2. Decision criteria and uncertainty in distribution system draw a boundary between external and internal uncertainties, but
asset management this differentiation is necessary because each uncertainty aspect
has different implications for the decision support process, and
2.1. Decision criteria in distribution system asset management the design of decision support tools as it will be discussed further.
2.2. Aspects of uncertainty in distribution system asset management Am am1 am2 amn
Essential in multi-criteria decision analysis (MCDA) is the assump- For example, the evidential reasoning (ER) approach [17]
tion that the decision maker (DM) has a set of values or preferences relaxes the demands of probability theory by invoking concepts
for the decision at hand, and that these values can be modelled. from Dempster–Shafer theory of evidence. The approach provides
When there is no uncertainty about the consequences, aik are a modelling framework for both complete and incomplete assess-
deterministic and there is a direct correspondence between ments. Rule and utility based techniques are used to transform
alternatives and consequences in terms of the criteria. various types of information into a unified format, so that both
One of the most used theories for decision support in this quantitative and qualitative information can be handled in a
setting is the multi-attribute value function theory (MAVT) consistent manner.
described for example in [15]. MAVT provides the background The purpose for this short overview of methods was to
for modelling decision maker’s preferences through a value emphasise that dealing with uncertainty in multi-criteria analysis
function V(Ai) that can be constructed based on a comparison of in practise requires to
consequences in each criterion (scores/partial value functions)
and a comparison of criteria (weights). In its simplest form, this understand, represent, and model uncertainty in problem
value function is additive and can be written as in the following: data, and
model preferences and risk attitudes.
X
n
VðAi Þ ¼ wk vk ðaik Þ
k¼1 The main advantage of such methods is that all relevant
elements of a decision (criteria, uncertainties) problem can be
where vk(aik) are the scores and wk are the weights. The value systematically taken into account in a transparent and justifiable
function is then used to calculate overall values for each alter- decision process.
native and the alternative having the ‘highest’ value is recom- Multi-criteria decision support generally relies either on effec-
mended to the decision maker. tive facilitation by a decision analyst or on the ability and
Under uncertainty, there may exist many possible values for willingness of the decision maker to make use of such an
the outcomes aik at the time of decision (external uncertainty) approach—often without being experts in the field of multi-
and often the values (scores and weights) can be difficult to criteria analysis. In both cases the main challenge is to be able
express (internal uncertainty). Under uncertainty aik can be choose a method that can provide relevant decision support in
described quantitatively (through probabilistic, fuzzy quantities), each decision situation, i.e. a method that is suitable for the
or qualitatively (through verbal descriptions—when outcomes are information, modelling tools and expert knowledge available.
not fully known or understood). Very often scenarios are con-
structed in order to simulate the consequences (quantitative or
qualitative) the decisions alternatives might have in terms of the 4. Case study
different criteria. In the construction of scenarios, a number of
methods can be used to model chains of events and phenomena This section presents an example on how the evaluation of
that lead to different outcomes with associated probabilities. maintenance and reinvestments strategies for 12 kV MV air-
Widely used are the probabilistic risk assessment (PRA) methods insulated switch-disconnectors can be carried out, using risk
such as fault and events trees, Bayesian networks, Monte Carlo analysis and multi-criteria decision support techniques.
simulations, etc. The case is built upon research previously reported in [18,13]
There are two main approaches to resolve uncertainty in and focuses on the risk of personnel injury during the operation of
multi-criteria decision support [14]. One approach is to resolve the switch-disconnector.
first the uncertainty in outcomes by somehow reducing the set of The case illustrates real decision situations in which both
possible aik to single values and then solve the MCDA problem in a internal and external uncertainty exist. The main input to the
‘deterministic’ setting. This can be done by using a decision decision process described consists of expert knowledge and
paradigm such as: expected values, utilities, MaxMin, MinMax, limited statistical and economic data. Risk and uncertainty in
MinRegret, etc., or to define risk as a separate decision criterion. both decision problem formulation and in decision maker’s
The other approach is to define scenarios with associated prob- judgements are addressed. The example focuses on how asset
abilities of occurrence and evaluate alternatives in each managers’ judgements with respect to the decision criteria can be
scenario—however, the theoretical background for integrating modelled and how these judgements contribute to the final
MCDA and scenario planning is not yet fully developed [14]. decision. The tools for decision support used are simplified risk
The most used method for modelling preferences under uncer- assessment supported by risk matrices [19] and a multi-criteria
tainty is the multi-attribute utility theory (MAUT). In its simples decision support software being able to deal with both quantita-
(additive) form, a multi-attribute utility function resembles a tive and qualitative description of criteria (consequences).
multi-attribute value function. The way to find parameters of a
utility function is however different. While in the case of MAVT 4.1. Description of the case
the scores and weights can be determined based on direct
comparison of consequences, in the case of MAUT these compo- Distribution networks contain large numbers of 12 kV MV air-
nents are found through lottery types of questions [16]. insulated switch-disconnectors. These assets are located in med-
The practical application of MAUT is often complicated because ium/low voltage (MV/LV) substations and their function is to
the axioms underlying the existence of utility functions and the break the load current when sectioning the MV grid. In the
methods for their construction can be easily violated during the transient period after the opening of the switch – when there is
real decision support process [14]. Moreover, MAUT measures no longer physical contact between the switches’ poles – the
‘complete’ preferences under uncertainty, when outcomes are current will continue to flow through an electric arc until
precisely described (usually quantitatively). However, preferences the natural zero-crossing of the alternating current. Normally the
may not always be completely specified (internal uncertainty) and electric arc will then extinguish in a controlled manner, and the
therefore alternative methods have been developed to deal with breaking of the current is successful. In some cases, with slow
preference value intervals, qualitative estimations and incomplete- movement of the switch during operation, the arc will re-ignite
ness in judgements. and the current will continue to flow through, generating energy
666 M.D. Catrinu, D.E. Nordgård / Reliability Engineering and System Safety 96 (2011) 663–670
Table 1
Safety risk assessment of air insulated switch-disconnectors regarding the undesired event slow operation of switch-disconnector.
dispersion through heat (with accompanying pressure rise). In such (N; E; W) is a new switch in an exposed environment, with wire
cases the switch-disconnectors may pose a risk for personnel injury. fence encapsulation.
Further in this paper we will refer to this risk aspect as ‘safety risk’. Each asset type was then characterized in terms of safety risk,
The risk of a slow operation of the switch-disconnector is as illustrated in the risk matrix in Table 1. The risk matrix is
relevant when designing maintenance and reinvestments strate- divided into three zones, marked with different shadings: the
gies for these assets. The analysis in the next section focuses on ‘‘Acceptable’’ zone (lower left), the ‘‘On-the-limit’’ zone (middle)
revealing whether all switches can be treated in the same way or and the ‘‘Unacceptable’’ zone (upper right).
if some kind of differentiation in the maintenance and reinvest- The experts asked to characterize the assets in terms of risk
ment activities is needed for specific types of switches. evaluated that usually the fully encapsulated assets should not
pose high safety risk. Then, among the semi-encapsulated assets,
the ones placed in exposed environment ((N;E;S), (O;E;S)) pose
4.2. Safety risk analysis medium safety risk. Generally all wire fence switches were
characterized to pose a middle to high safety risk.
Distribution companies’ experts estimated that a slow opera- In this example, risk assessment is based on a qualitative risk
tion of the switch and possible accidents in operation may happen evaluation based on expert knowledge. This exercise is easy to
while working with specific assets [18].They found that the most perform in practise since risk matrices are common tools for risk
relevant factors for differentiating these assets are: analysis in distribution companies. However, in the construction
of risk matrices additional quantitative analyses can also be used,
1. The age of the switch-disconnector: in addition to expert opinion. For example, detailed quantitative
New assets, age r25 years, further denoted as (N). risk analysis, modelling for example the potential loss of life (PLL),
Old assets, age4 25 years, further denoted as (O). as done in [18,13] can be used in the definition of consequences
2. The operating environment (and probability) scales.
Assets placed in an exposed environment, further denoted
as (E). 4.3. Risk based asset categorization
Assets placed in a clean environment, further denoted
as (C). The study focuses on a ‘test’ distribution network having in its
3. The encapsulation of the switch-disconnector1 : structure approximately 5000 switch-disconnectors:
Fully encapsulated—steel plate covered cubicles, with
pressure relieving outlets in safe directions, further 2500 units of fully encapsulated switch-disconnectors.
denoted as (F). 1850 units of semi-encapsulated switch-disconnectors.
Semi-encapsulated—steel plate cubicle fronts, top and 650 units of wire fence encapsulated switch-disconnectors.
bottom open, further denoted as (S).
Wire fence encapsulated, further denoted as (W). These assets are of different age and operate in a clean or
exposed environment. The number of assets of different types is
The age and operating environment are factors influencing the presented in Table 2.
likelihood of occurrence of the undesired event, while the The assets evaluated to pose medium and unacceptable risk, as
encapsulation type influences mostly the consequence of the illustrated in the risk matrix in Table 1, are highlighted with the
undesired event for the operator. respective colors in Table 2.
Further, several asset types have been defined considering
a combination of the above risk factors, e.g. a switch of type 4.4. Strategies for maintenance and reinvestment
1
The reason for having different encapsulations is that the substations have
The analysis of the asset population as represented in Table 2
been built over quite a long period of time, during which the technical solutions show that approx. 6% of the switches (280 units) are of high risk
have improved from the wire fence solution to the full encapsulations. and approx. 25% are in the medium risk zone (1240 units).
M.D. Catrinu, D.E. Nordgård / Reliability Engineering and System Safety 96 (2011) 663–670 667
2 a
Switches filled with the non-flammable sulphur hexafluoride gas. NOK—Norwegian krone.
668 M.D. Catrinu, D.E. Nordgård / Reliability Engineering and System Safety 96 (2011) 663–670
In the same way, the total safety risk picture for Strategies
2 and 3 can be described.
In addition to the above evaluation grades, rules have to be
defined in IDS, to show how each criterion grade may contribute
to the overall objective – the potential for risk reduction – based
on which the alternatives will be ranked. For example no invest-
ments (Strategy 1) is likely to induce higher risk exposure while Fig. 6. The ranking of strategies in terms of risk exposure.
M.D. Catrinu, D.E. Nordgård / Reliability Engineering and System Safety 96 (2011) 663–670 669
used, with the following degrees of belief {[Same risk expo- The focus in this paper was on the decision support process
sure, 19.8%], [Higher risk exposure, 7.2%], [Lower risk expo- and to show that such a process can be conducted by integrating
sure, 73%]}. different analyses and decision simulation tools, which in princi-
The result is rather intuitive since this strategy is proposing ple are available to the electricity distribution system manager.
improvements for the largest number of assets and has the lowest The link between different tools for risk analysis and the final
investment cost. The second ranked alternative is however not decision is often missing in real life decision making in distribu-
too far behind in terms of preferences although it proposes the tion companies and this paper illustrates possibilities for integra-
replacement of all wire fence encapsulated risk-disconnectors tion of different types of analyses. One of the main advantages of
believed to pose unacceptable risk at some point. using decision support techniques such as discussed in this paper
The purpose with this example was mainly to show possibi- is that it allows decision maker’s judgments at a given moment in
lities for illustrating and modelling preferences under uncer- time to be described and modelled. This can contribute to
tainty. The results exclusively reflect a given set of preference improving the way asset management decisions are recorded
information under the decision setting described. These results do and documented, and thus improving communication within the
not have any informative value otherwise. company’s internal decision levels or between distribution sys-
tem asset managers and external stakeholders.
[18] Nordgård DE, Sand K. Application of Bayesian networks for risk analysis of [21] Tang WH, Spurgeon K, Wu QH, Richardson ZJ. An evidential reasoning
MV air insulated switch operation. Reliability Engineering & System Safety approach to transformer condition assessments. IEEE Transactions on Power
2010;95:1358–66. Delivery 2004;19:1696–1703.
[19] Aven T. Risk analysis. Assessing uncertainties beyond expected values and [22] Yang J, Ai X, Zhao T. An evidential reasoning approach to risk assessments in
probabilities. Chichester: Wiley; 2008. composite generation and transmission system. Presented at the electric
[20] Yang J-B, Xu D-L. On the evidential reasoning algorithm for multiple attribute utility deregulation and restructuring and power technologies (DRPT) 2008.
decision analysis under uncertainty. IEEE Transactions on Systems, Man and Third international conference.
Cybernetics, Part A: Systems and Humans 2002;32:289–304.