Risk management for the tiles of the space shuttle

The tiles of the space shuttle orbiter are critical to its safety at reentry, and their maintenance between flights is time-consuming. The authors performed a probabilistic risk analysis to identify the most risk-critical tiles and to set priorities in the management of the heat shield. The model is based on a multiple partition of the orbiter’s surface. For the tiles in each zone, the authors used the following data: (1) the probability of debonding due either to debris hits or to a poor bond, (2) the probability of losing adjacent tiles once the first one is lost, (3) the probability of burn-through given the final size of the failure patch, and (4) the probability of failure of a critical subsystem under the skin of the orbiter if a burn-through occurs. A risk-criticality scale was designed based on the results of this model. It is currently used (along with temperature charts) to set priorities for the maintenance of the tiles. The authors found that 15 percent of the tiles account for about 85 percent of the risk and that some of the most critical tiles are not in the hottest areas of the orbiter’s surface. They recommended that NASA inspect the bond of the most risk-critical tiles and reinforce the insulation of the external systems (external tank and solid rocket boosters) that could damage the