Legal and risk / Free editable template

Bowtie risk analysis template

A bowtie diagram puts one top event in the middle, the threats that could cause it on the left and the consequences that could follow on the right. This example uses customer personal data exposed from a CRM, with two preventive barriers on each threat path, two recovery barriers on each consequence path, colours for barriers that are weak or untested and an escalation factor that could defeat a barrier.

This is a planning example, not legal advice. Check your own policies, advisers and the local rules that apply to you.

Use this template →See the example ↓

No account needed · Opens as your own editable page

Preview the bowtie risk analysis

View full-size preview ↗
Bowtie risk analysis example showing hazard, top event and four threat paths, preventive and recovery barriers, barrier strength key and an escalation factor
Everything in this example is editable. Replace the labels, move the shapes and adapt the layout to your work.

How to use this template

  1. Name the hazard and top event

    The hazard is the thing you hold or do, such as personal data in a CRM. The top event is the moment you lose control of it.

  2. Draw the threats and consequences

    List what could cause the top event and what could follow from it. Keep each one specific enough to attach a barrier to.

  3. Add and rate the barriers

    Place each control on the path it blocks and colour it by how well it works. Add escalation factors that could make a barrier fail.

Questions about this template

Can I add more threats and consequences?

Yes. Add a threat on the left or a consequence on the right, then add the barriers between it and the top event in the centre.

Do I need an account to use it?

No. Open the template and edit it in your browser. Your work saves on this device. An account is optional if you want to sync your workspace.

Can I export the finished diagram?

Yes. Use Export in the editor to save a PNG, SVG or PDF, or download an editable .epicdraw backup.

More Legal and risk templates →