SolidBowtie

Template library

Twenty bowtie templates, modelled properly.

Every template is a complete bowtie — typed barriers with suggested owners, escalation factors where they belong, and keep-alive activities already scheduled. Browse them freely; create a free account to copy one into your organization and make it yours.

IT Security

Ransomware attack

From phishing and unpatched services to encryption and double extortion — the full ransomware kill-chain with ISO 27001 Annex A controls.

5 threats 17 barriers 3 consequences

Customer data breach (PII)

Unauthorised access to personal data — web vulnerabilities, cloud misconfiguration, stale access — with GDPR-grade recovery barriers.

5 threats 20 barriers 4 consequences

Critical service outage

Availability as a security property: zone failures, bad deployments, DDoS and expired certificates against a 24/7 platform.

5 threats 16 barriers 3 consequences

Insider data exfiltration

A trusted insider walking out with crown-jewel data — motive meets opportunity, caught by least privilege, monitoring and offboarding.

4 threats 14 barriers 3 consequences

Process Safety

Loss of containment — storage tank

The classic process-safety bowtie: corrosion, overfill, ignition sources and impact around an atmospheric hydrocarbon tank.

5 threats 19 barriers 4 consequences

Runaway exothermic reaction

Batch chemistry that gets away: cooling failure, mischarging and accumulation against layers of protection ending in relief and quench.

4 threats 13 barriers 3 consequences

HSE & Construction

Fall from height — roof works

Work on flat roofs with fragile sections: edges, skylights, ladders and weather — arrested by harnesses, nets and rescue.

5 threats 17 barriers 3 consequences

Confined space entry

Tanks, pits and vessels: atmosphere, isolation and engulfment hazards controlled by permits, gas testing and standby rescue.

4 threats 13 barriers 3 consequences

Healthcare

Medication error — high-risk infusion

Wrong dose of a high-risk IV medicine: look-alike drugs, pump programming and patient identity, recovered by monitoring and rapid response.

4 threats 14 barriers 3 consequences

Aviation

Runway excursion — landing

Landing on contaminated runways: stabilised approaches, touchdown discipline and the engineered margins that catch a long landing.

5 threats 16 barriers 3 consequences

Financial & Fraud

Payment fraud & business email compromise

CEO fraud, invoice fraud and compromised mailboxes against the payment process — stopped by verification rituals and dual authorisation.

4 threats 13 barriers 3 consequences

Business Continuity

Failure of a critical supplier

A single critical supplier stops delivering — insolvency, cyber attack or logistics — against dual sourcing, stock and tested continuity plans.

4 threats 11 barriers 3 consequences

People & Organisation

Loss of key personnel & knowledge

Critical knowledge concentrated in a few heads: resignation, illness or burnout — defused by succession, documentation and cross-training.

4 threats 11 barriers 3 consequences

Infectious disease outbreak in the workforce

An outbreak spreading through shared workplaces: hygiene, stay-home norms and remote capability versus staffing collapse.

3 threats 10 barriers 3 consequences

Workplace Safety

Workplace fire

Every organisation's baseline scenario: ignition sources and combustibles versus detection, suppression, compartments and drilled evacuation.

4 threats 12 barriers 3 consequences

Road traffic accident — driving for work

The most common serious work risk there is: fatigue, distraction and vehicle condition against planning, telematics and modern vehicle safety.

5 threats 13 barriers 3 consequences

Reputation & Communications

Public reputation crisis

A negative story goes viral — service failures, misconduct or misinformation — met with monitoring, trained spokespeople and honest comms.

4 threats 11 barriers 3 consequences

Projects & Change

Critical project failure

The flagship programme that runs late, over budget or unusable — caught by stage gates, scope control and honest go-live criteria.

5 threats 11 barriers 3 consequences

Quality

Product recall / quality escape

A defective or unsafe product reaches customers — design flaws, process drift and supplier parts versus testing, traceability and a drilled recall.

5 threats 16 barriers 4 consequences

Physical Security

Break-in & physical intrusion

Forced entry, tailgating and social engineering against layered physical security — perimeter, access control, detection and response.

4 threats 15 barriers 4 consequences

None of them fits exactly? Describe your risk instead.

The AI drafts a complete, method-correct bowtie from a plain-language description of your operation — in about 20 seconds.

Start free →