The BowTie methodology is a barrier-based risk management approach used to identify, assess, and control risks in a clear and structured way. It provides a visual representation of how risks occur and how they can be prevented or mitigated.

This method is widely used across industries to improve safety, communicate risk, and support decision-making. 

What is a BowTie Model?

A BowTie model visually connects:

• A hazard (source of risk)
• A top event (loss of control)
• The causes (threats) leading to the event
• The consequences if the event occurs
• The controls (barriers) that prevent or reduce risk

This structure allows organizations to clearly understand how risks develop and how they are managed.

Why Use BowTie?

The BowTie methodology helps organizations:

• Clearly visualize risk scenarios
• Identify critical safety controls
• Improve communication across teams
• Support regulatory and compliance requirements
• Strengthen risk management processes

Where is BowTie Used?

BowTie is commonly used in industries such as:

• Oil & Gas
• Aviation
• Healthcare
• Construction
• Mining
• Energy and Utilities

It is especially useful in environments where risks are complex and high-impact.

Summary

The BowTie methodology provides a simple yet powerful way to understand and manage risk, combining visual clarity with structured analysis to support safer operations.

Overview

A BowTie model is built around several core elements that define how risks are structured and managed.

Hazard

A hazard is anything with the potential to cause harm.

Examples include:

• Activities (e.g., driving)
• Conditions (e.g., icy roads)
• Objects (e.g., machinery)

Hazards are often part of normal operations and cannot always be eliminated.

Top Event

The top event represents the moment when control over the hazard is lost. It is not the final outcome but the point where the system becomes unsafe.

Example:

• Losing control of a vehicle

Threats

Threats are the direct causes that can lead to the top event. They must have a clear cause-and-effect relationship.

Example:

• Tyre blow-out

Consequences

Consequences are the outcomes that may occur if the top event is not controlled.

Example:

• Collision resulting in injury

Summary

These elements form the backbone of the BowTie model, helping organizations clearly map how risks originate and develop.

Overview

Controls (or barriers) are measures used to manage risk within a BowTie model.

They are divided into two types:

Prevention Controls

Prevention controls are placed on the left side of the BowTie.

They are designed to:

• Stop threats from causing the top event
• Eliminate or reduce the likelihood of risk

Example:

• Maintenance procedures
• Safety checks

Recovery Controls

Recovery controls are placed on the right side of the BowTie.

They are designed to:

• Reduce the impact after the top event occurs
• Limit the severity of consequences

Example:

• Emergency response systems
• Safety equipment

Key Difference

Prevention Controls	Recovery Controls
Stop the event	Reduce impact
Before top event	After top event

Summary

Together, prevention and recovery controls provide a complete risk management strategy, addressing both causes and outcomes.

What are Escalation Factors?

Escalation factors are conditions that can weaken or cause failure of controls. They do not directly cause the top event but increase the likelihood of it occurring.

Example

• A safety system exists (control)
• Poor maintenance reduces its effectiveness (escalation factor)

Why They Matter

Escalation factors help identify:

• Weak points in safety systems
• Conditions that increase risk
• Areas requiring additional controls

Escalation Factor Controls

Additional controls can be introduced to manage escalation factors and ensure primary controls remain effective.

Summary

Understanding escalation factors helps organizations ensure that their controls remain reliable and effective over time.

Overview

One of the key strengths of the BowTie methodology is its ability to visually represent risk.

What BowTie Shows

A BowTie diagram clearly illustrates:

• The hazard at the center
• Threats on the left
• Consequences on the right
• Controls that manage risk

Benefits of Visualization

BowTie diagrams help organizations:

• Understand complex risks quickly
• Communicate risks across teams
• Identify gaps in controls
• Improve decision-making

Practical Use

BowTie is commonly used for:

• Risk assessments
• Safety case development
• Incident analysis
• Training and workshops

Summary

The visual structure of BowTie makes it a powerful tool for improving awareness and control of risk across organizations.

Overview

Risk in a BowTie model is managed through the combined effectiveness of multiple controls.

How It Works

Each control acts as a barrier.

• Multiple controls work together
• Risk occurs only when all controls fail

This aligns with the “Swiss cheese model” of risk.

Key Principle

• Controls should be independent and effective
• Weak or dependent controls reduce overall protection

Practical Considerations

• Avoid duplicating similar controls
• Ensure controls are reliable
• Focus on quality over quantity

Summary

Effective risk management depends on how well multiple controls work together to prevent or mitigate risk.

ALARP stands for As Low As Reasonably Practicable. It is a key principle in risk management used to ensure that risks are reduced to a level where further reduction would require disproportionate effort compared to the benefit gained.

In simple terms, ALARP means that organizations must take all reasonable and practical steps to reduce risk — but not to the point where the cost, time, or effort of doing so is excessively high compared to the level of risk reduction achieved.

How It Works

ALARP is based on balancing two factors:

• The level of risk
• The resources required to reduce that risk (time, cost, effort)

Organizations must demonstrate that:

• All realistic measures to reduce risk have been considered
• Any remaining risk is justified because further reduction would not be reasonably practicable

Risk Levels

The ALARP model typically divides risk into three regions:

• Unacceptable Region
  Risk is too high and must be reduced regardless of cost
• Tolerable (ALARP) Region
  Risk is acceptable only if it has been reduced as far as reasonably practicable
• Broadly Acceptable Region
  Risk is low and does not require further action

Why ALARP is Important

• Helps organizations make balanced and defensible safety decisions
• Ensures resources are used effectively
• Supports regulatory compliance and safety case requirements
• Demonstrates that risks are being actively managed

Summary

ALARP is not about eliminating all risk – it is about reducing risk to a sensible and justifiable level, ensuring that safety improvements are made wherever they are reasonable and practical.