SolidBowtie

Break-in & physical intrusion

Forced entry, tailgating and social engineering against layered physical security — perimeter, access control, detection and response.

HazardPremises holding valuable assets, sensitive data and people
Top eventAn unauthorised person gains access to the premises

4 threats 15 barriers 4 consequences safety-critical barriers marked

Use this template free. Copy “Break-in & physical intrusion” into your own workspace and adapt every barrier — no credit card.

Start free with this template →

Threats & preventive barriers

Each threat is a credible pathway to the top event; its barriers interrupt that pathway before control is lost.

Forced entry out of hours

  • Perimeter hardening (certified doors, locks, fencing)

    Passive (hardware) · 80% effective · Owner: Facilities Manager

  • Intruder alarm with 24/7 monitoring ★ critical

    Active hardware · 85% effective · Owner: Security Manager

    Frequent false alarms get downgraded by responders

    📅 Alarm & sensor test · monthly keep-alive task

  • CCTV coverage with recording

    Active hardware · 75% effective · Owner: Security Manager

Tailgating during business hours

  • Badge access control with speedgates ★ critical

    Active hardware · 80% effective · Owner: Security Manager

    Politeness culture holds doors open

  • Challenge culture & security awareness

    Behavioural (human) · 60% effective · Owner: Security Manager

Social engineering (fake visitor or contractor)

  • Visitor management with ID check & escort

    Socio-technical · 75% effective · Owner: Reception Lead

  • Contractor vetting & registration

    Socio-technical · 70% effective · Owner: Facilities Manager

Insider facilitation (keys, badges, codes)

  • Key & badge lifecycle management

    Socio-technical · 70% effective · Owner: Security Manager

    📅 Physical access rights review · quarterly keep-alive task

Consequences & recovery barriers

Once the top event happens, recovery barriers limit each consequence.

Theft of equipment and assets

  • Safes & secure storage for valuables

    Passive (hardware) · 80% effective · Owner: Facilities Manager

  • Asset marking & inventory

    Socio-technical · 65% effective · Owner: Facilities Manager

Access to sensitive data and systems

  • Server room in a separate access zone ★ critical

    Passive (hardware) · 85% effective · Owner: IT Operations Manager

  • Clear desk & screen-lock policy

    Behavioural (human) · 65% effective · Owner: CISO

Violence toward staff present

  • Lone-worker protocol & panic buttons

    Active hardware · 70% effective · Owner: Security Manager

  • Security response & police escalation

    Socio-technical · 75% effective · Owner: Security Manager

Business disruption and repair costs

  • Incident response & insurance cover

    Socio-technical · 65% effective · Owner: CFO

Copying this template gives you a fully editable bowtie: barrier owners arrive as role suggestions, escalation factors sit on their barriers, and keep-alive activities are scheduled from the moment you copy. New to the notation? Read what the bowtie method is or browse the practical guides.

Use this template free. Copy “Break-in & physical intrusion” into your own workspace and adapt every barrier — no credit card.

Start free with this template →