Documentation

Ataytis Assurance documentation.

Generate fault trees, bow-ties, event trees, reliability block diagrams, GSN arguments and Markov models from Power BI data with the Ataytis Assurance visual.

Ataytis Assurance · Bow-Tie Risk Analysis

Bow-tie node and relationship types

Every node type and relationship type a bow-tie recognises, what to write for each, how each is drawn, and how the visual decides which side of the top event a node is on.

Node types

Node typeWrite it asDrawn asRole
HazardHazard, HAZOrange hexagon above the top eventWhat causes harm once control of it is lost. One per bow-tie, connected to the top event.
ThreatThreat, CauseRed triangle, far leftSomething that can bring about the top event.
Preventive barrierPreventive Barrier, Preventive, Prevention, Preventive ControlBlue rounded rectangleStops a threat reaching the top event.
BarrierBarrier, Control, Safeguard, Measure, Defence, Defense, Protection, Protective Measure, Control MeasureGrey rounded rectangle, only when its side cannot be foundA barrier recorded without its side. It becomes preventive or recovery by where it sits.
Top eventTop Event, Top, TE, Loss of ControlRed diamond in the centreThe point where control is lost. One per bow-tie.
Mitigative barrierMitigative Barrier, Mitigative, Mitigation, Mitigative Control, Mitigation Measure, Recovery, Recovery Barrier, Recovery Control, Recovery MeasureGreen rounded rectangleLimits a consequence once the top event has happened.
ConsequenceConsequence, OutcomePink parallelogram, far rightA result of the top event.
Escalation factorEscalation Factor, EscalationAmber dashed ellipseA condition that weakens a barrier.
Escalation-factor controlEscalation Factor Control, Escalation Control, EFCGrey dashed pillManages an escalation factor.

Mitigative barriers are called recovery barriers in the summary strip and the Node Inspector. They are the same thing.

Matching ignores case, spaces, underscores, hyphens and full stops, so PreventiveBarrier, preventive_barrier and Preventive-Barrier all read as a preventive barrier. Wording that matches nothing can be mapped under Node type values on the Data Mapping tab. Colours, symbols and display names can be changed under Appearance → Node types.

Which side a node is on

The side comes from the connections, not the node type. A node on a path into the top event is on the threat side, and a node on a path out of it is on the consequence side. A barrier written as Barrier or Control takes the side it is found on.

When the type and the position disagree, the position is believed and the node is reported: a preventive barrier on the consequence side, a mitigative barrier on the threat side, a threat on the consequence side and a consequence on the threat side are all errors.

Relationship types

Relationship typeWrite it asUse it forConnector
Leads toLeads To, Causes, Hazard to Top Event, Hazard Path, ReleasesAny step on a path, and the hazard's connection to the top event. The default for a blank cell.Grey arrow
Threat pathThreat Path, Preventive Path, Prevention Path, Preventive, Threat to Top Event, Barrier Path, Preventive Barrier PathSteps from a threat to the top event.Red arrow
Consequence pathConsequence Path, Mitigative Path, Mitigation Path, Mitigative, Recovery Path, Top Event to Mitigation, Top Event to Consequence, Mitigative Barrier PathSteps from the top event to a consequence.Green arrow
EscalatesEscalates, Degrades, Escalates Barrier, Degrades Barrier, Escalation, Escalation FactorAn escalation factor's connection to the barrier it weakens.Amber dashed arrow
Controlled byControlled By, Controls, Controls Escalation, Escalation Control, Escalation Factor ControlAn escalation control's connection to its factor.Grey dashed arrow

Leads to, Threat path and Consequence path build the same structure, because the side of a step comes from where it sits. They change only the connector colour. Escalates and Controlled by can be written in either direction.

Where a cell is blank or says Leads to, a connection between an escalation factor and a barrier is read as Escalates, and one between an escalation factor and its control as Controlled by.

What each row leads to

In an edge list, the Connected Node ID on each row is:

RowConnected Node ID
HazardThe top event.
ThreatIts first preventive barrier, or the top event.
Preventive barrierThe next preventive barrier, or the top event.
Top eventThe first recovery barrier of a path, or a consequence. One row per path.
Mitigative barrierThe next mitigative barrier, or the consequence.
ConsequenceBlank.
Escalation factorThe barrier it weakens.
Escalation-factor controlIts escalation factor.
Bow-tie node and relationship types — Ataytis Assurance | AtaytisTech