Barrier-based major-accident model — the lingua franca of modern safety-case argument
Bow-Tie has matured from a Shell-developed visualisation aid in the 1990s into the dominant barrier-based risk model across upstream oil and gas, COMAH safety cases, and increasingly hydrogen, ammonia, and battery-storage operations. The CCPS Bow-Tie Guidelines (2018) and Energy Institute Bow-Tie Standard (2019, rev. 2024) codify the discipline — Threat → Preventive Barrier → Top Event → Mitigative Barrier → Consequence — with explicit treatment of escalation factors, degradation controls, and barrier effectiveness scoring. The technique's strength is communicating major-accident logic to non-specialists: directors, operators, and regulators see the same picture. Its execution risk is barrier inflation (claiming non-independent or non-effective controls), missing degradation factors, and disconnection from LOPA. A defensible Bow-Tie programme integrates with HAZOP findings upstream, with LOPA / SIL allocation in parallel, and with barrier-health KPIs and SCE (Safety Critical Element) performance standards downstream.

A structured, facilitated process — from scope definition through close-out — producing defensible, actionable outputs.
Define Major Accident Hazard (MAH) set from HAZID / QRA; specify Top Events per loss-of-containment category (gas cloud, liquid spill, BLEVE, toxic release, fire); confirm Top Event definitions with physical-state taxonomy per Energy Institute Bow-Tie Standard (2019).
Decompose each Top Event to its threat (cause) set with HAZOP deviation traceability; assign threat categories (hardware failure, human error, external event, corrosion / degradation); build Threat-Top-Event-Consequence chain for each MAH.
Map preventive and mitigative barriers per EI / CCPS taxonomy (passive, active hardware, active human, instrumented); score each barrier against CCPS effectiveness criteria — independence, reliability, audit frequency, validation record; flag weak or uncredited barriers.
Identify escalation factors (maintenance backlog, weather, MOC state, bypass) for each barrier; specify degradation controls (inspection intervals, proof-test regimes, impairment permits); link escalation factors to Bow-Tie barrier to create risk-pathway visibility.
Designate Safety Critical Elements (SCEs) per UK KP4 / PFEER / NORSOK S-001 criteria; specify performance standards (functionality, availability, reliability, survivability) per SCE; align LOPA SIF designations and SIL targets to SCE performance-standard requirements.
Specify barrier-health KPI dashboard per API RP 754 Tier 3/4 leading indicators; build MOC impact assessment procedure for barrier-affecting modifications; export BowTieXP / RiskView files with version control; produce COMAH / CCPS RBPS-aligned safety-case deliverable.

Speak with our team to scope an engagement tailored to your facility, regulatory context, and lifecycle stage.