Skip to content

Bow-Tie Analysis

Path: /bow-tie

Bow-Tie Analysis

Visual bow-tie risk analysis connecting threats, controls, and consequences. Useful for understanding control effectiveness and identifying gaps.

How It Works

  • Left side (Threats) — What could go wrong.
  • Center (Event) — The risk event you're analyzing.
  • Preventive controls — Controls that reduce the likelihood of the event.
  • Mitigating controls — Controls that reduce the impact if the event occurs.
  • Right side (Consequences) — Potential outcomes if the event occurs.