Break-in & physical intrusion
Forced entry, tailgating and social engineering against layered physical security — perimeter, access control, detection and response.
4 threats 15 barriers 4 consequences safety-critical barriers marked
Use this template free. Copy “Break-in & physical intrusion” into your own workspace and adapt every barrier — no credit card.
Start free with this template →Threats & preventive barriers
Each threat is a credible pathway to the top event; its barriers interrupt that pathway before control is lost.
Forced entry out of hours
-
Perimeter hardening (certified doors, locks, fencing)
Passive (hardware) · 80% effective · Owner: Facilities Manager
-
Intruder alarm with 24/7 monitoring ★ critical
Active hardware · 85% effective · Owner: Security Manager
Frequent false alarms get downgraded by responders
📅 Alarm & sensor test · monthly keep-alive task
-
CCTV coverage with recording
Active hardware · 75% effective · Owner: Security Manager
Tailgating during business hours
-
Badge access control with speedgates ★ critical
Active hardware · 80% effective · Owner: Security Manager
Politeness culture holds doors open
-
Challenge culture & security awareness
Behavioural (human) · 60% effective · Owner: Security Manager
Social engineering (fake visitor or contractor)
-
Visitor management with ID check & escort
Socio-technical · 75% effective · Owner: Reception Lead
-
Contractor vetting & registration
Socio-technical · 70% effective · Owner: Facilities Manager
Insider facilitation (keys, badges, codes)
-
Key & badge lifecycle management
Socio-technical · 70% effective · Owner: Security Manager
📅 Physical access rights review · quarterly keep-alive task
Consequences & recovery barriers
Once the top event happens, recovery barriers limit each consequence.
Theft of equipment and assets
-
Safes & secure storage for valuables
Passive (hardware) · 80% effective · Owner: Facilities Manager
-
Asset marking & inventory
Socio-technical · 65% effective · Owner: Facilities Manager
Access to sensitive data and systems
-
Server room in a separate access zone ★ critical
Passive (hardware) · 85% effective · Owner: IT Operations Manager
-
Clear desk & screen-lock policy
Behavioural (human) · 65% effective · Owner: CISO
Violence toward staff present
-
Lone-worker protocol & panic buttons
Active hardware · 70% effective · Owner: Security Manager
-
Security response & police escalation
Socio-technical · 75% effective · Owner: Security Manager
Business disruption and repair costs
-
Incident response & insurance cover
Socio-technical · 65% effective · Owner: CFO
Copying this template gives you a fully editable bowtie: barrier owners arrive as role suggestions, escalation factors sit on their barriers, and keep-alive activities are scheduled from the moment you copy. New to the notation? Read what the bowtie method is or browse the practical guides.
Use this template free. Copy “Break-in & physical intrusion” into your own workspace and adapt every barrier — no credit card.
Start free with this template →