Bow-Tie Analysis

Correct Answer: Preventive barriers address threat pathways while mitigative barriers handle consequence pathways

In Bow-Tie Analysis, barriers are control measures that are put in place to manage risks, and they are positioned on either side of the hazardous event or top event. The correct answer is that preventive barriers address threat pathways while mitigative barriers handle consequence pathways. This accurately describes the fundamental relationship in Bow-Tie Analysis: - Preventive barriers are placed on the left side of the bow-tie diagram to block or reduce threat pathways that could lead to the hazardous event - Mitigative barriers are placed on the right side to minimize or reduce the consequences if the hazardous event occurs The other options are incorrect because: - Risk identification and likelihood determination are not specifically tied to the preventive/mitigative barrier relationship - Root causes and secondary effects do not correctly represent the barrier functions - both types of barriers can address primary and secondary issues - The technical vs. organizational risk division is not accurate - both types of barriers can address any type of risk category

Correct Answer: The identification of the hazard or critical event

In a Bow-Tie Analysis, the first and most crucial step is identifying the hazard or critical event that sits at the center of the bow-tie diagram. This is the correct approach because: 1. The hazard/critical event forms the central point from which all other analysis stems 2. You need to clearly define what you're analyzing before determining causes or consequences 3. The entire bow-tie structure revolves around this central event Why other options are incorrect: - Establishing recovery measures and mitigation strategies comes after identifying both the hazard and its potential consequences - Mapping potential consequences can only be done after the central hazard is identified - Assessment of prevention controls is performed after identifying both the hazard and its potential causes The logical flow of a Bow-Tie Analysis is: 1. Identify the hazard/critical event 2. Identify causes and consequences 3. Identify controls and recovery measures 4. Analyze escalation factors

Correct Answer: To identify conditions that could reduce the effectiveness of preventive controls

In a Bow-Tie Analysis, escalation factors are critical elements that show what might compromise or weaken existing control measures. The primary benefit of including them is that they help identify conditions that could reduce how well preventive controls work. This is the most accurate answer because: - It aligns with the core purpose of escalation factors in the Bow-Tie methodology - It helps organizations strengthen their risk control measures by identifying potential weaknesses - It enables proactive management of control measure effectiveness The other options are incorrect because: - Calculating probability based on historical data is not the purpose of escalation factors - that's done through other risk analysis techniques - Establishing the sequence of controls is part of the basic Bow-Tie structure, not related to escalation factors - Resource allocation for risk responses is a separate risk management activity that isn't specifically tied to escalation factors in Bow-Tie Analysis