Workplace safety demands proactive, visual tools that go beyond checklists. Bowtie analysis, a structured risk assessment method, provides a clear, diagrammatic way to understand how hazards can lead to incidents and—most importantly—where barriers must be placed to prevent harm. Originally developed in the oil and gas industry, the bowtie model has been adopted across sectors including healthcare, aviation, and manufacturing. This expanded guide explains how to use bowtie analysis to build stronger safety measures, from drawing your first diagram to embedding the method in your safety management system.

What Is Bowtie Analysis?

Bowtie analysis is a risk assessment technique that visually maps the pathways from a hazard to its potential consequences. The diagram takes its name from its shape: a central “knot” represents the top event (the moment when control is lost), with threats and preventive barriers on the left side, and consequences and recovery barriers on the right. Unlike many traditional risk tools, which either focus on causes (fault tree) or outcomes (event tree), bowtie analysis combines both in one intuitive picture.

The method was popularized in the 1990s by the oil and gas sector, particularly after the Piper Alpha disaster highlighted the need for a barrier-focused approach. Today it is codified in industry standards such as CGE Risk’s BowTieXP methodology and the UK Health and Safety Executive’s (HSE) guidance on major hazard control.

The Anatomy of a Bowtie Diagram

Understanding the components of a bowtie is essential before creating one. Each element has a specific role.

Hazard

The hazard is the source of potential harm—for example, a high-pressure gas pipeline, a forklift operating near pedestrians, or a toxic chemical stored in a warehouse. Hazards are the starting point.

Top Event

The top event is the loss of control over the hazard. It is the moment when the hazard is released, such as a pipeline rupture, a forklift striking a worker, or a chemical spill. The top event itself is not yet a consequence; it is the critical juncture where a chain of events begins.

Threats and Preventive Barriers

Threats are the direct causes that could trigger the top event. Each threat should be specific (e.g., “corrosion of pipeline wall” rather than “poor maintenance”). For every threat, you draw a preventive barrier—a measure that stops the threat from causing the top event. Common preventive barriers include safety training, equipment inspections, engineering controls, and automated alarms.

Consequences and Recovery Barriers

Once the top event occurs, multiple consequences can arise. On the right side of the diagram, each consequence (e.g., “fire in processing unit,” “employee injury,” “environmental contamination”) has its own recovery barrier. Recovery barriers mitigate the severity of the outcome: fire suppression systems, emergency response plans, personal protective equipment, and evacuation procedures are typical examples.

Escalation Factors and Escalation Controls

An escalation factor is something that could weaken or defeat a barrier. For instance, “extreme cold” could reduce the effectiveness of a water-based fire suppression system. Escalation controls are additional measures that manage these factors, such as heating elements or redundant backup systems.

Step-by-Step Guide to Conducting Bowtie Analysis

Creating a bowtie diagram requires a team with operational expertise, safety professionals, and management representation. The following steps provide a structured approach.

Step 1: Define the Scope and Identify the Hazard

Begin by agreeing on the boundaries of the analysis. Are you assessing a specific process area, a piece of equipment, or an entire facility? List the hazards within that scope. For each hazard, you will create a separate bowtie diagram. Example: for a welding operation, the hazard could be “arc welding with combustible materials nearby.”

Step 2: Identify the Top Event

The top event must be a single, discrete loss of control. Avoid vague phrasing. Instead of “fire incident,” use “ignition of combustible material due to welding sparks.” This precision makes barrier selection easier.

Step 3: Brainstorm Threats

Use techniques like brainstorming, incident history review, and fault tree analysis to generate threats. For the welding example, threats might include:

  • Failure to remove combustible materials from the work zone
  • Improper handling of gas cylinders
  • Inadequate fire watch procedures

Record each threat as a separate branch on the left side.

Step 4: Place Preventive Barriers

For each threat, determine what currently prevents it from causing the top event. If the barrier does not exist, you have a gap. Barriers can be engineered (e.g., a spark arrester) or administrative (e.g., a hot work permit system). Write the barrier on the line between the threat and the top event.

Step 5: Identify Consequences and Recovery Barriers

On the right side, list all plausible consequences of the top event. For the welding scenario, consequences could include a small fire, a flash burn, or a full-scale explosion. For each consequence, add a recovery barrier that reduces harm—such as a fire extinguisher, emergency shut-off valve, or first aid kit.

Step 6: Assess Escalation Factors and Controls

Review each barrier and ask: “What could make this barrier fail or become less effective?” Add escalation factors beneath the barrier, and escalation controls beneath those. This step prevents overconfidence in existing safeguards.

Step 7: Validate and Document

Present the diagram to a wider group of stakeholders, including frontline operators. Validate that all barriers are actually in place and effective. Document the analysis, including assumptions and references, for future audits and updates.

Benefits of Using Bowtie Analysis

When properly executed, bowtie analysis provides advantages that go beyond traditional risk matrices.

  • Visual Clarity: A single diagram communicates the entire risk story—threats, controls, consequences—making it accessible to non-experts.
  • Barrier-Focused Mindset: The model forces teams to think about what actively prevents incidents, rather than just listing risks.
  • Gap Identification: Missing or weak barriers become immediately obvious, prompting corrective action.
  • Improved Auditing: Barriers can be linked to performance indicators, making it easy to verify their effectiveness over time.
  • Regulatory Compliance: Many industries require a demonstrated “as low as reasonably practicable” (ALARP) approach, which bowtie analysis supports.

Bowtie Analysis vs. Other Risk Assessment Methods

Bowtie analysis is not a replacement for all other tools; it complements them. Here is how it compares to common alternatives.

Bowtie vs. HAZOP (Hazard and Operability Study)

HAZOP is a rigorous, team-based technique that uses guide words (e.g., “more,” “less”) to systematically identify deviations in process parameters. It excels at finding latent hazards but does not visually map barriers or escalation factors. Bowtie analysis can take the outputs of a HAZOP study and present them in a user-friendly diagram. The two methods work best in sequence.

Bowtie vs. Fault Tree Analysis (FTA)

FTA is a deductive logic diagram that starts with a top event and works backward to find all combinations of failures. While FTA is excellent for quantifying probability, it can become complex and hard to communicate. Bowtie’s left side is a simplified version of a fault tree, but it adds the right-side consequences and recovery measures that FTA often omits.

Bowtie vs. Event Tree Analysis (ETA)

ETA begins with an initiating event and branches out to model different outcomes based on success or failure of safety systems. Bowtie’s right side resembles a small event tree, but the bowtie provides a complete, balanced picture by including both causes and consequences in one diagram. For holistic risk communication, bowtie is more intuitive.

Implementing Bowtie Analysis in Your Organization

Adopting bowtie analysis requires more than reading a guide. It involves cultural change, training, and integration with existing safety processes.

Integration with Safety Management Systems

Bowtie diagrams should become a living part of your safety management system (SMS). Link each barrier to specific procedures, training records, and maintenance schedules. When an incident or near-miss occurs, update the relevant bowtie to reflect new threats or barrier weaknesses. Use the diagrams during management reviews to demonstrate that risks are under control.

Training and Competency

All personnel who participate in bowtie workshops need basic training in the method. Facilitators should have deeper knowledge, including how to avoid common biases (such as overconfidence in existing barriers). Several organizations offer certification courses through the Center for Chemical Process Safety (CCPS). In-house training can be supplemented with real-world case studies from your industry.

Software Tools

While bowtie diagrams can be drawn with pen and paper, software tools simplify creation, version control, and sharing. Options range from dedicated platforms like BowTieXP and Bowtie Master to general-purpose diagramming tools such as Microsoft Visio or draw.io. For enterprise use, choose a tool that integrates with your existing risk register and permits linking barriers to performance indicators.

Common Mistakes and How to Avoid Them

Even experienced teams can fall into traps that reduce the value of bowtie analysis.

  • Too Many Threats: If every possible unlikely scenario is included, the diagram becomes cluttered and loses focus. Stick to credible threats that realistic barriers can address.
  • Vague Barriers: “Training” is not a barrier; “annual hands-on fire extinguisher training with documented competency checks” is. Specify the barrier’s function and measurement.
  • Ignoring Human Factors: Many barriers rely on human performance. Consider what could cause a worker to bypass a safety procedure (fatigue, pressure, lack of supervision) and add escalation controls.
  • Creating a One-Time Artifact: A bowtie diagram that is never reviewed or updated becomes obsolete. Schedule periodic reviews and after every significant incident or change.
  • Failure to Validate Barriers: Do not assume a barrier is effective just because it is listed. Verify it through audits, testing, and incident data.

Real-World Applications

Bowtie analysis has been successfully applied across diverse industries. Here are three examples.

Oil and Gas

In offshore drilling, bowtie diagrams are used to manage blowout risks. The top event is “loss of well control.” Threats include kick detection failure, BOP (blowout preventer) malfunction, and cement failure. Preventive barriers incorporate pressure testing, kick drills, and redundant BOP rams. Recovery barriers include emergency disconnect systems and capping stacks.

Healthcare

Hospitals use bowtie analysis to address patient safety risks. For example, a hazard could be “administration of high-risk medications.” The top event is “wrong dose given to patient.” Threats range from look-alike drug names to calculation errors. Preventive barriers include barcode scanning, double-checks, and smart infusion pumps. Recovery actions include immediate emergency response and antidote administration.

Manufacturing

A manufacturing facility might apply bowtie analysis to a robotic work cell. Hazard: “powered robotic arm with human interaction.” Top event: “worker caught in robotic envelope.” Threats include failure of safety interlock, procedural violation, and loss of power. Barriers are physical guards, light curtains, lockout/tagout procedures, and presence-sensing sensors.

Conclusion

Bowtie analysis is a powerful, visual method that helps organizations systematically identify and control risks. By mapping threats, preventive barriers, consequences, and recovery measures in a single diagram, it clarifies exactly where interventions are needed—and where they are lacking. Integrating bowtie analysis into your safety management system, training teams, and regularly updating diagrams will move your approach from reactive incident investigation to proactive prevention. Whether you work in oil and gas, healthcare, manufacturing, or any other sector, the bowtie model provides a common language for risk that everyone from the shop floor to the boardroom can understand and act upon.