Key Points
- Visual diagram mapping threats → top event → consequences.
- Identifies preventive barriers (left) and mitigating barriers (right).
- Widely used in oil & gas, chemical, and mining industries.
- Integrates with PTW by showing which barriers depend on permit controls.
Definition
Bow-Tie Analysis is a visual risk assessment methodology that maps the pathways from hazard causes (threats) through a top event to potential consequences, identifying preventive barriers on the left side and mitigating barriers on the right side. The resulting diagram resembles a bow tie, with the hazard on the far left, the top event (loss of control) at the center knot, and consequences on the far right. Each barrier represents a control measure — such as engineering controls, procedures, permits, training, or alarms — that either prevents the top event from occurring or limits its consequences. Bow-Tie analysis is widely used in oil and gas, chemical processing, mining, and other high-hazard industries because it provides a clear, intuitive visual representation of how multiple layers of protection work together. It integrates directly with permit-to-work systems by identifying which barriers are maintained through PTW controls, isolation procedures, and safety-critical work permits.
Related Terms
HAZOP (Hazard and Operability Study)
A HAZOP (Hazard and Operability Study) is a structured and systematic risk assessment technique used to identify potential hazards and operability problems in industrial processes, systems, and facilities. Developed in the 1960s by ICI (Imperial Chemical Industries), HAZOP has become the gold standard for process hazard analysis in the chemical, petrochemical, oil and gas, pharmaceutical, and energy industries worldwide. The methodology works by systematically examining each element of a process using a set of guide words — such as "no," "more," "less," "reverse," and "other than" — applied to process parameters like flow, temperature, pressure, level, and composition. For each deviation identified, the HAZOP team evaluates the potential causes, consequences, existing safeguards, and whether additional risk reduction measures are needed. A HAZOP study is typically conducted by a multidisciplinary team including process engineers, operations personnel, safety professionals, instrumentation specialists, and maintenance representatives, led by an experienced HAZOP facilitator. The study produces a comprehensive record of all identified hazards, their potential consequences, and recommended actions — this documentation becomes a critical reference for permit-to-work processes because it identifies the specific hazards that permits must address in each area of the facility. HAZOP studies are required by major process safety regulations including OSHA's PSM standard, the EU Seveso Directive, and industry guidelines such as IEC 61882. They are typically conducted during the design phase of new facilities, before major modifications, and periodically throughout the operational life of existing plants to ensure that evolving conditions are captured.
Job Safety Analysis (JSA)
A Job Safety Analysis is a structured process used to break down a task into individual steps and identify hazards associated with each step. For every identified risk, appropriate control measures are defined to reduce or eliminate the hazard. JSA is typically prepared before work begins and is often linked directly to the permit. In practice, it ensures that work is systematically thought through rather than executed based on assumptions.
Hierarchy of Controls
The hierarchy of controls is a universally accepted framework in occupational safety for selecting the most effective risk reduction measures. It ranks controls from most to least effective in five tiers: elimination (removing the hazard entirely), substitution (replacing with a less dangerous alternative), engineering controls (isolating people from the hazard through physical barriers or design changes), administrative controls (changing how people work through procedures, training, and scheduling), and personal protective equipment (PPE — protecting the individual worker). The principle is that organizations should implement controls at the highest feasible level before relying on lower-level controls. Elimination and substitution are most effective because they remove the hazard at its source, requiring no ongoing human compliance. Engineering controls create physical barriers. Administrative controls and PPE are least effective because they depend on consistent human behavior. In permit-to-work practice, the hierarchy directly shapes risk assessments and permit conditions. The risk assessment for each permit should demonstrate the hierarchy was considered — documenting why higher-level controls are not feasible and specifying the combination of controls used. A well-designed digital PTW system can prompt assessors to work through the hierarchy systematically.
Dynamic Risk Assessment
Dynamic risk assessment refers to continuous evaluation of risks during the execution of work as conditions change. Unlike pre-planned assessments, it is performed in real time by workers on site. It is critical in environments where conditions evolve rapidly. In practice, it supports situational awareness and safe decision-making during execution.
More in Risk & Safety
Point of Work Risk Assessment (PWRA)
PWRA is a risk assessment performed at the exact location where work will take place just before starting. It verifies that planned controls are still valid in the actual environment. It acts as a final validation between planning and execution.
Residual Risk
Residual risk is the level of risk that remains after all control measures have been implemented. It cannot be fully eliminated but must be reduced to an acceptable level. Understanding residual risk is critical for decision-making.
Last Minute Risk Assessment (LMRA)
LMRA is a final safety check performed immediately before starting work. It ensures that nothing has changed since the original assessment. It is often performed by the work team on site.
Simultaneous Operations (SIMOPS)
SIMOPS refers to multiple work activities taking place at the same time in the same area. These activities may interact and create additional risks. Proper coordination is essential to avoid conflicts.
Frequently Asked Questions
How does Bow-Tie differ from a risk matrix?
A risk matrix rates hazards by likelihood and severity to prioritize them, but does not show how controls work or interact. Bow-Tie analysis visually maps the specific barriers preventing or mitigating each scenario, making it far more actionable for operational teams managing permits and safety controls.
Can Bow-Tie analysis be used for permit-to-work planning?
Yes. Bow-Tie diagrams help PTW coordinators understand which barriers are maintained through permits. When issuing a hot work permit, for example, the Bow-Tie shows which preventive and mitigative barriers the permit controls — such as gas testing, fire watch, and emergency response — making the permit requirements directly traceable to risk controls.
Explore Our Guides
Deepen your knowledge with our comprehensive guides and expert resources.

Pirkka Paronen
CEO, Gate Apps
CEO of Gate Apps, expert in digital permit-to-work and HSEQ software.
