Framework
Risk

Bowtie Analysis

Causes → event → consequences

Best for
mapping preventions and mitigations
Time
1–2 hr
Difficulty
Intermediate

Fill in your own Bowtie Analysis right here.

Free · no sign-up · saves in your browser · export a PDF

Open the free Bowtie Analysis template →Or use the AI canvas
Bowtie Analysis diagramSchematic of the Bowtie Analysis framework: Causes → event → consequences.ThreatsEVENTConsequences
The Bowtie Analysis diagram — Causes → event → consequences.
Example

Mapping preventions and mitigations around a customer-data breach

Bowtie analysis
  1. Causes — phishing, leaked token, vendor compromise, misconfigured S3
  2. Top event — customer PII exposed externally
  3. Preventive barriers — SSO + 2FA, secret scanning, vendor reviews, IaC linting
  4. Consequences — regulatory fines, churn spike, brand damage, lawsuits
  5. Mitigating barriers — IR runbook, cyber insurance, customer comms template, audit log

Related frameworks

Risk

FMEA

Failure modes & effects analysis

Risk

Risk Matrix

Probability × impact

Risk

Risk Register

Logged risks with owner and status

Ready to try it? The Bowtie Analysis template is free and needs no account.
Open the free template →
iPhone & iPad

Run the Bowtie Analysis on your iPhone

Describe your situation in one sentence and Framework's AI fills in the Bowtie Analysis for you — plus 100+ other frameworks, synced with the web app.

Download on theApp StoreFree · syncs with the web app