AM

I am working for a client in the oil & gas industry.

They have modelled their risks & controls in a ‘Bow Tie Risk’ diagram (an oil & gas industry standard type diagram) using a standard EPC model type.

In order to export this information from ARIS into GRC, as we all know the Function, risk, control & test definition objects in ARIS have to be in EPC’s, Business Control Diagrams and KPI Allocation diagrams, which unfortunately look nothing like the traditional bow tie risk diagram.

Does anyone have any ideas how I can model a bow tie risk diagram in ARIS?

I was thinking perhaps a script/macro that can take the objects from the bow tie risk diagram in an EPC and ‘move’ or ‘create’ them in the BCD and KPI models we need?

Has anyone else done this before?

Any ideas would be much appreciated!

I have attached an example of a bow tie risk diagram.

File attachments
by Fernando Ribeiro
Posted on Sun, 06/26/2011 - 01:08

Hello, Alice

I work as an aviation advisor for an Oil company, recently converted to the process cult.

I´ve tried myself to model a Bow tie, but before that I would like to share a few thoughts about "for what problem is a Bow tie diagram the solution.

In the far left of such diagram should be depicted a hazard (source of danger), something like height, high pressure fluids, nuclear waste, fire, or even uncertainty.

Then, depicted in your graphic, are "threats", which are things that can lead to losing control of the hazard, which so far is under control. The next level are "controls" to provide protection against each threat. But each control has it own "escalation", basically a threat that can lead to the failure of its specific control. Next, there will be a second layer of controls to neutralize the escalations.

Failures in one of those control "lanes" can lead to the so called "top event". It is important to chose carefully the top event, paced in the center of your Bow tie. This event is not the ultimate consequence to be prevented. Instead, it has to be a significat event that, if detected, may start a successful recovery through the controls just at the top event right side. Those will have escalations as well and, if failed, will allow the nasty Top event consequences enter the real world, leaving no other choice than mitigation controls.

My draft thoughts on the subject is that both left side controls as the right side ones deserve their own lane for modelling.

Although I am still developing my modelling skills, I look forward to cooperate with you in this project, if you need.

Best regards,

Fernando

 

 

0

Featured achievement

Rookie
Say hello to the ARIS Community! Personalize your community experience by following forums or tags, liking a post or uploading a profile picture.
Recent Unlocks

Leaderboard

|
icon-arrow-down icon-arrow-cerulean-left icon-arrow-cerulean-right icon-arrow-down icon-arrow-left icon-arrow-right icon-arrow icon-back icon-close icon-comments icon-correct-answer icon-tick icon-download icon-facebook icon-flag icon-google-plus icon-hamburger icon-in icon-info icon-instagram icon-login-true icon-login icon-mail-notification icon-mail icon-mortarboard icon-newsletter icon-notification icon-pinterest icon-plus icon-rss icon-search icon-share icon-shield icon-snapchat icon-star icon-tutorials icon-twitter icon-universities icon-videos icon-views icon-whatsapp icon-xing icon-youtube icon-jobs icon-heart icon-heart2 aris-express bpm-glossary help-intro help-design Process_Mining_Icon help-publishing help-administration help-dashboarding help-archive help-risk icon-knowledge icon-question icon-events icon-message icon-more icon-pencil forum-icon icon-lock