What Is Bowtie Analysis? A Practical Guide for High-Hazard Industries

If you manage operational risk in mining, construction, or energy, you’ve likely encountered bowtie analysis — or at least heard the name. But what is it, exactly? And why are safety teams across high-hazard industries replacing their spreadsheet-based risk registers with bowtie diagrams?

This guide breaks it down in plain language.

The Problem With Traditional Risk Registers

Most risk registers are flat tables. They list hazards, assign a likelihood and consequence rating, calculate a risk score, and call it done. There are two major problems with this approach:

1. No visual connection between threats, controls, and consequences. The register tells you a risk exists — but not how it might unfold.
2. Controls get listed but never tracked. When a critical control degrades, nothing in the spreadsheet tells you.

Bowtie analysis solves both of these.

What Is a Bowtie Diagram?

A bowtie diagram is a visual risk model shaped like a bowtie (hence the name). At the centre is the top event — the moment when control of a hazard is lost.

On the left side are the threats that could cause the top event, along with the preventive controls (barriers) that stop each threat from reaching it.

On the right side are the consequences that could result if the top event occurs, along with the mitigating controls (barriers) that reduce the impact.

Threats → [Preventive Controls] → TOP EVENT → [Mitigating Controls] → Consequences

The result is a complete picture of a single hazard: what could go wrong, what’s stopping it, and what limits the damage if it does.

Why It Works for High-Hazard Industries

Bowtie analysis is particularly effective in high-hazard settings because:

• It makes invisible risk visible. Everyone — from frontline workers to executives — can see the barriers standing between a hazard and a serious incident.
• It highlights control dependencies. If a preventive barrier degrades, you can see exactly which threats are no longer adequately controlled.
• It supports ISO 31000. Bowtie analysis fits neatly within the ISO 31000 risk management framework as a risk analysis and evaluation tool.
• It drives better conversations. Workshop participants can discuss specific barriers rather than arguing over abstract risk scores.

How to Build a Bowtie: Step by Step

1. Identify the Hazard

Start with a source of potential harm. In mining, this might be “underground ground instability.” In construction, “working at height.”

2. Define the Top Event

The top event is the moment control of the hazard is lost. For ground instability, the top event might be “unplanned ground fall.” For working at height: “fall from elevation.”

3. List the Threats (Left Side)

What could cause the top event? Be specific:

• Inadequate ground support design
• Unexpected geological conditions
• Failure to follow ground control procedures
• Equipment impact on support structures

4. Identify Preventive Controls

For each threat, list the barriers that prevent it from causing the top event:

• Geotechnical assessment and design standards
• Ground monitoring systems (extensometers, radar)
• Standard operating procedures for ground support installation
• Pre-shift inspections

5. List the Consequences (Right Side)

If the top event occurs, what could happen?

• Personnel injury or fatality
• Equipment damage or loss
• Production disruption
• Regulatory action

6. Identify Mitigating Controls

For each consequence, list the barriers that reduce its severity:

• Emergency response procedures
• Exclusion zones and barricading
• Insurance and business continuity plans
• Incident investigation and learning processes

7. Assess Barrier Health

This is where bowtie analysis goes beyond a static diagram. Each barrier should be assessed for:

• Effectiveness — Does it actually work?
• Reliability — Does it work consistently?
• Independence — Could multiple barriers fail from the same cause?

From Diagram to Living System

A bowtie diagram on a wall is useful. A bowtie in a living system — where barrier health is tracked, degradation triggers alerts, and control ownership is clear — is transformative.

That’s the difference between a bowtie diagram and bowtie risk management.

Modern platforms like RiskSight connect your bowtie diagrams to real-time control monitoring, so you’re not just mapping risk — you’re actively managing it.

Getting Started

If you’re new to bowtie analysis, start with one hazard. Pick something your team knows well, run a workshop, and build the diagram together. You’ll quickly see gaps in your existing controls that a spreadsheet would never reveal.

Ready to try it digitally? Start a free RiskSight trial — bowtie analysis is built right in, with guided wizards to walk you through the process.