- Identify the risk to be examined in the bow-tie analysis. Typically used for high risks events (i.e. the MAH of the facility) that are expected to have a high level of consequence.
- Identify the events that can cause the hazard (MAH) to occur.
- Identify and list down the causes and the consequences to the hazard on the left and right of the hazard respectively.
- List down existing controls on the causes (preventive controls) below the causes on the left, and the controls on the consequences (corrective/mitigative controls) below the consequences on the right.
- Optionally, rank the risk to each consequence of the hazard.
- Identify any potential event that could cause escalation to the failure of each control/barrier.