Six worked templates — each a complete bowtie and a control register, ready to adapt. The vocabulary changes between disciplines; the shape does not.
Want to drive it yourself? Open the interactive preview — explore a live, read-only bowtie and read every control — or get a guided walkthrough in a demo.
Major-accident hazard on a process plant — corrosion, overpressure, mechanical impact, and maintenance error, through to pool fire, vapour cloud explosion, and toxic release.
Air-traffic loss-of-separation event — controller and pilot error, equipment failure, weather, and handover, through to TCAS RA, airprox, and mid-air collision.
Data-breach scenario — phishing, exposed secrets, web vulnerabilities, insider misuse, and supply chain, through to exfiltration, regulatory action, and reputational harm.
Patient-safety event for smart-pump infusion — programming error, drug mix-up, pump malfunction, and environment, through to patient harm, MDR, and litigation.
Rotating-equipment failure on critical service — bearing failure, cavitation, seal failure, process upset, and ageing assets, through to production outage, secondary damage, a safety event, and financial impact.
Built on the WA Code of Practice — excessive demands, low control, inappropriate behaviour, poor change management, isolated work, and traumatic exposure, through to psychological injury, fatigue incidents, burnout, and regulatory action.
Rotating-equipment failure on critical service — bearing failure, cavitation, seal failure, process upset, and ageing assets, through to production outage, secondary damage, a safety event, and financial impact.
This is the template behind the control register shown here: every control with its criticality, control effectiveness, degradation factors, and performance standards, ready to export to PDF.
| Control | Criticality | Control Effectiveness |
|---|---|---|
| Bearing failure · preventive | ||
| Continuous vibration monitoring (online)Accelerometers with ISO 10816 alarm bands. | Critical | Adequate |
| Bearing temperature monitoringRTDs alarmed in the DCS at warning and trip. | Critical | Deficient |
| Safety event from leak / fire · mitigative | ||
| Gas / leak detection in pump areaPoint detectors tied into ESD on confirmed detection. | Critical | Adequate |
| Local fire protection (deluge / extinguisher)Foam or water deluge on the pump bay. | Non-critical | Deficient |
Explore any template yourself in the read-only preview, then let a demonstration walk the full editor and the register live on the one that fits your work.
