Bowtie analysis is one of the best aviation risk management tools to communicate risk and demonstrate commitment to safety.
Although not universally shared, I've seen that about 10% of smaller operators in the 100 to 500 employee range believe that bowtie is the best way to communicate operational risk and satisfy aviation safety management system (SMS) auditors. These "bowtie adherents" are usually providing services to the oil and gas industry. Losing a contract with an oil and gas company could potentially cost them millions of dollars, hence the popularity of the bowtie among aviation service providers.
Your bowtie covers all essential risk management basics, from root causes to impacts and risk controls. Aviation SMS that uses bowtie analysis:
Learning how to perform a bowtie analysis is daunting - hence why more companies don’t use this highly visual risk management tool. Another drawback of bowtie analyses is that one can easily get lost in the weeds, i.e., they don't know when to stop the seemingly never-ending analysis. Subsequently, the bowtie loses its effectiveness as a communication and risk management tool when the final analysis requires an entire wall to print out and display.
If you can keep your bowtie under control, it provides an excellent snapshot of hazards' risks and controls.
If you are not yet using bowtie analysis, here’s how flexible it can be in real-world use cases:
All of this information is great, but if you don’t know how to create a bowtie then it doesn’t help you. Or if you don't have the tools to easily create an easy-to-read/understandable bowtie, then you will be simply "spinning your wheels" and dreaming of greener pastures.
Don’t be afraid of failure when starting to create and experiment with bowtie analysis. Creating quality bowties will take practice and the right tools. One could theoretically create a bowtie on paper or using MS Excel. The more effective tools are either stand-alone bowtie products, like Bowtie XP, or embedded within aviation SMS database software.
There are several advantages of having the bowtie tools within your aviation SMS database, including:
Once you learn the technology and are able to quickly create a bowtie, this will become a secret risk management weapon that you can employ when the situation warrants it. This usually occurs when auditors come calling and they want to see you demonstrate how you are monitoring the effectiveness of risk controls.
Here is a 5-step example walk-through of how to do bowtie analysis in aviation SMS.
We will base our scenario on several real-world situations for a Runway Incursion. In our scenario:
We will create a bowtie from the perspective of the 747 airline company.
Step one is the most critical step. You need to choose the Top Event. You will have a hard time choosing the Top Event if you don’t know what a risk actually is. Before proceeding, please quickly review or educate yourself if you don't completely understand the difference between hazards, risks, and risk controls. We have seen MANY safety professionals make simple mistakes due to an incorrect understanding of these common risk management definitions.
The Top Event is:
Take a moment to think about what the point of lost control is in our scenario. If you said that it was when the 747 breached the hold short point then you are correct.
This is the Top Event because this is the situation that pilots need to react to in order to regain control over safety.
Now what we need to do is work backward, listing each event step by step that leads to the incursion. As we list each event we ask, “But why?” Eventually, we are looking for the root cause of the threats. A good indication that you have arrived at root causes is when your answer to the question is, “Just because.”
With our scenario this root cause analysis would look like this:
Now we need to consider the root cause threats that lead to the Preceding Events by asking "but why" about each event.
Notice that the threats tend to be nouns, and the events that follow tend to include verbs (“see” “noticed” and “hear”). We know that our root cause threats are correct because we can give no reasons for them - their answer to the "but why" is just because. Notice that distraction and Human Error are perfectly valid threats, as sometimes we simply are distracted or make mistakes for no “good reason.”
Next we need to look at what the direct consequences of breaching the runway are. These consequences are the intermediary events before our Top Event and final Impacts, or damages. In our scenario, the direct consequences were:
It’s important to distinguish between consequences and Impacts. Consequences do not cause Impact damages themselves but lead directly to damages.
Impacts, or final consequences, are always characterized by damage. Damage could be to persons, equipment, reputation, money, etc. – anything that hurts your organization. Picking out damages is usually pretty easy. Can you pick out the damages of our scenario?
Here are a few:
Each item causes an element of damage to the company.
The last step that is critical to bowtie analysis is to list your risk controls directly after each item to see how your risk controls failed. If you are unable to list a risk control, it’s a good indication that you need to implement one.
A few risk controls we can show as an example are:
My example is a bit limited by space, but in actual practice, you will have more space to fit in your risk controls nicely. Moreover, your bowtie analysis will feature as many risk controls as possible, perhaps even several risk controls per item.
There are two approaches to creating your bowtie.
In the first method, your bowtie analysis may look different every time. Sometimes you may have more threats and following events, and sometimes your Top Event will lead almost directly to impacts. With this method, there’s no “right way” for a bowtie to look, so long as you capture the main elements of the situation.
However, many organizations find it much more comfortable to use a different method. With this alternative approach, you follow templates to keep bowtie analysis consistent both in how they look and how they are created. While this method does not allow a highly, flexible "output" or "deliverable" for each situation, it will be easier and less error-prone. Furthermore, when managers start studying and using bowties in their risk management decision-making processes, having consistent bowtie outputs allows for both quicker analysis and subsequent decision-making.
I think the best idea is to do what is most effective and safest for your organization.
An aviation safety database that has consistent, easy-to-understand bowtie features is definitely a bonus for every aviation SMS. Bowties can become complicated and Bowtie XP is very expensive software. If you can get a bowtie module in your aviation SMS database, you are one step closer to putting all your aviation risk management tools in one bucket.
Aviation SMS database software should have more than a bowtie tool. The best aviation SMS databases have user-friendly tools that address all SMS requirements, regardless of whether they are the requirements of:
SMS Pro is considered the best by our clients who have already done extensive research on the available solutions. Learn why they have found SMS Pro to be the best SMS solution. SMS Pro is not a point solution, nor is it a group of disparate point solutions cobbled clumsily together. It is an integrated suite of tools with excellent SMS performance monitoring tools that can be used by the entire organization, not just the safety department.
Does it look like we are a good fit? Have questions? We serve all aviation industry segments AND ONLY aviation. This software was created for the aviation industry by aviation SMS database professionals.
Last updated in June 2024.