The threats that will cause the tiger to escape are identified and listed to the left, i.e.

it could escape if the cage is not strong enough or the gate is left open. The consequences of the tiger escaping have been identified and displayed to the right, i.e. it could maul/kill a member of the public or could itself be killed. The level of risk associated with each consequence can be assigned according to the organizations risk matrix and displayed on the diagram. Now that the hazard has been defined, we can put threat controls in place which will stop the hazard from occurring and consequence controls which will prevent the outcome. (click on the image to see a larger version) Controls can be linked to specific sections or procedures of the organizations safety management system, can have responsibilities and inspection frequency assigned, and be ranked and colour coded for effectiveness. The diagram below represents a simple bowtie diagram. On each control there is the ability to identify:
Page 3 of 5

the task

who is responsible for the task

classify the control as appropriate

Any documents that may be applicable

How the task/control will be validated The controls can be categorised by Basic Risk Factors (BRFs) / General Failure Types (GFTs) as described by James Reason. The control can also have "Threats to the Controls" (sometimes called escalation factors) which weaken the effectiveness as shown below. Each threat to the control can in turn have barriers to prevent the threat from occurring. bowties - The Uses The bowtie methodology can be used for any type of hazard analysis, from major accidents, through occupational and environmental to business, IT and security risks. Typical examples are: Demonstrating control of Risks The bowtie methodology is an effective way of demonstrating that an organizations risks are reduced to ALARP (As Low As Reasonably Practicable) without the over reliance on qualitative risk assessments that has been apparent in the past. The bowtie methodology is accepted by safety case regulators as a demonstration of ALARP. Controls on the diagrams can be categorised by Safety Integrity Levels (SIL), Effectiveness and other types of control that may be required.
Page 4 of 5

Communication and Training As the bowtie is a graphical representation of the issue and is readily understood by a wide audience it is commonly used in communication. Bowtie diagrams have been printed out in anything from full colour A1 size posters to A5 pocket booklets as an aid in communicating HSE issues. As bowtie diagrams are easy to understand, all members of the workforce can participate in the process. Organizational Improvements It is possible to use bowties in conjunction with numerous techniques to identify the branches which are weak. The use of BowTie allows ownership and critical tasks to be given to controls ensuring that critical controls do not get over looked. In a similar way BowTie also allows the controls to be categorised by Basic Risk Factors (BRFs) / General Failure Types (GFTs) as described by James Reason and so linked into an accident investigation. Identifying Risks

Bowtie diagrams are an effective means of systematically identifying hazards, assessing the controls and promoting discussion. The bowtie diagram graphically demonstrates that controls are in place to reduce the risk to ALARP and document the HAZID results. Maintaining a Risk Register Bowtie diagrams provide a simple, easily understood and readily updated representation of the hazards involved in an organizations activities and the measures taken to control the risk.
Page 5 of 5