Bowtie in PSM (Process Safety Management)

In Process Safety Management (PSM), the Bowtie method is a risk assessment tool that visualizes the relationships between hazards, potential incidents, and the barriers preventing them. It gets its name from the bowtie shape formed by combining a fault tree (left side) and an event tree (right side).

Here’s a detailed breakdown.

1. Core Components of a Bowtie Diagram

A bowtie centers on a specific Top Event (the loss of control). Around it, you map:

· Hazard: Something with the potential to cause harm (e.g., a storage tank of gasoline).

· Top Event: The point where control is lost, but no harm has occurred yet (e.g., "Leak from tank").

· Threats: Causes or initiators that could lead to the top event (e.g., corrosion, overfilling, impact from vehicle).

· Consequences: Outcomes if the top event unfolds unchecked (e.g., fire, explosion, environmental damage, fatality).

· Prevention Barriers: Controls that stop a threat from causing the top event (e.g., level alarms, corrosion inspection).

· Mitigation Barriers: Controls that stop the top event from escalating into severe consequences (e.g., firewalls, emergency shutdown, evacuation alarms).

· Escalation Factors: Conditions that could defeat a barrier (e.g., "alarm ignored due to operator fatigue").

· Escalation Controls: Measures to prevent escalation factors (e.g., alarm management policy, shift rotation).

2. How the Bowtie is Constructed (Step-by-Step)

1. Identify the Hazard & Top Event: Choose a critical process hazard and define the exact moment of control loss.

2. List Threats (Left Side): Brainstorm all credible ways the top event could happen.

3. Draw Prevention Barriers: For each threat, list barriers that prevent reaching the top event.

4. List Consequences (Right Side): What outcomes are possible after the top event?

5. Draw Mitigation Barriers: For each consequence, list barriers that reduce severity.

6. Add Escalation Factors: For each barrier, ask: "What could make it fail?" (e.g., bypassed, poorly maintained).

7. Add Escalation Controls: Measures to ensure barriers remain effective.

3. Why Bowtie is Unique vs. Other PSM Tools

Tool Focus Limitation Bowtie Advantage

HAZOP Identify deviations and causes Can become cluttered; doesn't show barrier links Organizes causes and barriers visually around a single top event

LOPA (Layer of Protection Analysis) Quantifies risk reduction Numerical, less intuitive for operators Shows how layers interlock; better for communication

FMEA Component failure modes Narrow focus on equipment Broad view including human and organizational factors

Key Bowtie strengths:

· Visual & intuitive – Non-experts (operators, managers) grasp it quickly.

· Barrier-focused – Highlights what prevents accidents, not just causes.

· Links PSM elements – Connects procedures, training, maintenance, and emergency response in one picture.

· Identifies critical controls – Shows which barriers are most important (single barriers on many paths).

4. Practical Example (Fuel Storage Tank)

Hazard: Gasoline in atmospheric tank

Top Event: Tank overflow

Threats (Left side):

· Control system fails to close inlet valve

· Operator error during filling

· High level alarm fails

Prevention Barriers:

· Independent level transmitter + logic solver (SIS)

· Operator training and checklists

· Independent high-level switch (hardwired)

Consequences (Right side):

· Pool fire → injury/fatality

· Vapor cloud explosion → structural damage

· Soil/water contamination

Mitigation Barriers:

· Dike around tank (contains spill)

· Gas detection + firewater system

· Emergency response plan & drills

Escalation Factor: Level switch bypassed for maintenance

Escalation Control: Permit-to-work system with bypass tracking

5. Using Bowtie in PSM Systems

Under standards like OSHA PSM (29 CFR 1910.119) or CCPS RBPS, bowties support:

· Process Hazard Analysis (PHA): As a stand-alone method or supplement to HAZOP.

· Mechanical Integrity: Identifies which safety-critical equipment needs inspection frequencies.

· Management of Change (MOC): When a barrier is removed or altered, bowtie shows impacted paths.

· Operating Procedures: Clarifies when and how to interact with each barrier.

· Incident Investigation: After an incident, overlay actual barrier failures on the bowtie to find root causes.

· Auditing: Auditors can check each barrier and escalation control for effectiveness.

6. Limitations to Know

· Single top event focus – Complex facilities need many bowties.

· Static – Can become outdated without periodic review.

· Semi-quantitative – Not as precise as LOPA for risk ranking (though can be combined).

· Subject to bias – Missing a threat or barrier undermines the analysis.

7. Best Practices for Implementation

· Involve operators & maintenance – They know real barrier weaknesses.

· Keep barriers "SMART" – Specific, Measurable, Assignable, Realistic, Traceable.

· Review periodically – Update after incidents, MOC, or every 3-5 years.

· Use software – For large sites, bowtie software (e.g., BowtieXP, DNV Synergi) helps manage many diagrams and link to actions.

Summary

The bowtie method transforms a complex PSM study into a clear, actionable map. It answers: What can go wrong? How can we stop it? How can we reduce harm if it happens? And what could defeat our safeguards? For frontline workers, it shows why following a procedure matters. For managers, it reveals where risk is truly controlled—or not.