Bow Tie Risk diagram in GRC

Hello, Alice

I work as an aviation advisor for an Oil company, recently converted to the process cult.

I´ve tried myself to model a Bow tie, but before that I would like to share a few thoughts about "for what problem is a Bow tie diagram the solution.

In the far left of such diagram should be depicted a hazard (source of danger), something like height, high pressure fluids, nuclear waste, fire, or even uncertainty.

Then, depicted in your graphic, are "threats", which are things that can lead to losing control of the hazard, which so far is under control. The next level are "controls" to provide protection against each threat. But each control has it own "escalation", basically a threat that can lead to the failure of its specific control. Next, there will be a second layer of controls to neutralize the escalations.

Failures in one of those control "lanes" can lead to the so called "top event". It is important to chose carefully the top event, paced in the center of your Bow tie. This event is not the ultimate consequence to be prevented. Instead, it has to be a significat event that, if detected, may start a successful recovery through the controls just at the top event right side. Those will have escalations as well and, if failed, will allow the nasty Top event consequences enter the real world, leaving no other choice than mitigation controls.

My draft thoughts on the subject is that both left side controls as the right side ones deserve their own lane for modelling.

Although I am still developing my modelling skills, I look forward to cooperate with you in this project, if you need.

Best regards,

Fernando