Bow Ties Part II Do Bow Ties Have A Place in Alarm Management

 Contact Us (https://www.exida.
com/Company/Contact)
 SAEL (https://www.exida.com/SAEL) 
Write something and press enter


exida explains Blog

exida (https://www.exida.com/Home) / Blog (https://www.exida.com/Blog)
/ Bow Ties Part II: Do Bow Ties have a place in Alarm Management?
Bow Ties Part II: Do Bow Ties have a

place in Alarm Management?
Todd Stauffer
Tuesday, March 24, 2020
As discussed in Part I (https://www.exida.com/Blog/bow-ties-part-i-great-for-formal-occasions-and-

for-risk-management), bow tie diagrams provide an easy-to-understand visual representation of risk
management information (hazards, potential consequences, barriers, degradation factors and
controls). In this article we examine the applicability of bow ties to alarm management.
According to the CCPS book “Bow Ties in Risk Management”, there are five main barrier types.
We use cookies to enhance your experience. By continuing to visit this site you agree to
our use of cookies. More info (http://wikipedia.org/wiki/HTTP_cookie)
An operator response to an alarm is considered an “Active Hardware + Human” barrier. To be
considered a complete barrier it must contain the following three elements; Detect (e.g., high-high
level indicator with alarm), Decide (e.g., the operator diagnoses the situation and initiates a
response), and Act (e.g., operator manipulates final control element manually or via the control
system).
Note that in the example diagrams below the barrier type is indicated by color code and label.
Bow tie Diagram for Buncefield Incident

To illustrate the potential use of bow ties for alarm management, the Buncefield tank overflow and
explosion (2009) was analyzed. At the Buncefield Oil Depot, a failure of a tank level gauge
prevented its associated high-level alarm from being annunciated to the operator. As the level in the
tank reached its ‘ultimate’ high level, a second protection layer, an independent safety switch, failed
to trigger an alarm to notify the operator and failed to initiate a trip which would have automatically
shut off the incoming flow. The tank overflow and ensuing fire resulted in a £1 billion (1.6 billion
USD) loss.
As shown in the bow tie diagram below, the three main barriers to prevent “Tank Overflow” (Top
Event) were “Fill Plan & Proactive Monitoring”, “Tank Level Alarms & Operator Response”,
and “Independent High-High Automatic Shut-Off”. The degradation factors for the Tank Level
Alarm barrier were identified as “Alarm Failure” and “Operators fail to respond appropriately to
alarms”. The degradation controls to prevent “Alarm Failure” are “Regular Maintenance and
Testing” and “Alarm failure easily identified in control room and prioritized fault repair
process”.
Identifying these degradation controls highlights their importance to the prevention of a Major
Accident Event (MAE) such as tank overflow. If these controls had been adopted and applied
rigorously, it is possible that the failure of the level gauge indicating the tank was 2/3 full could have
been prevented or would have still drawn the operator’s attention to investigate the abnormal
situation.
Figure – Standard Bow Tie Showing Main Pathways and Degradation Factors (Prevention Side) Ref CCPS
Multi-Level Bowtie Approach

To dive down and analyze the human and organizational factors (HOF) associated with a particular
barrier, a multi-level bow tie approach can be used. It focuses on the impact of human error on
barrier degradation and subsequently on making the barriers as robust as possible.
To create a multi-level bowtie diagram for the Buncefield incident, the Top Event becomes the
failure of one of the barriers, in this example “Tank Level Alarms & Operator Response”. The
bow tie diagram then focuses in detail on the degradation factor “Operators fail to respond
appropriately to alarms”, which is now modelled as a threat. The barriers to prevent this threat
include “Alarm easily identified on HMI” and “Defined operator action in event of high level
alarm (auditable)”. As shown in the Level 1 Extension Bow Tie below, each barrier has additional
degradation factors and controls that can now be shown that would have made the main bow tie
diagram too complicated.
Figure – Level 1 Extension Bow Tie Selected Barriers (Ref CCPS)
The benefit of calling out the additional level of detail would be in focusing the operations,
maintenance, and management team on what safety critical tasks should be performed to maximize
the reliability of the operator response to alarm barrier. It could reinforce to the team, and garner
management commitment, for the following critical alarm management activities:
• Performing alarm rationalization (including prioritization) to ensure all alarms are meaningful
• Maintenance and testing of alarms based on classification
• Developing Alarm Response Procedures to provide guidance to the operator when a barrier
alarm is generated
• Designing the Human Machine Interface (HMI) to maximize the operator’s situation
awareness
In conclusion it appears that bow tie diagrams have potential for use in alarm management,
particularly for alarms that are expected to help prevent major accident events. Bow tie diagrams
can highlight alarm management tasks to be performed. They also highlight alarm management
degradation controls, many of which are generic and could be applied to the entire alarm system.
Bow tie diagrams seem to provide a useful mechanism for integrating process safety, alarm
management, (and cybersecurity) risk assessment results into a common view.
Since this is a relatively new methodology, time will tell how far bow ties are adopted to support
alarm management.
References:
“Bow Ties in Risk Management: A Concept Book for Process Safety”
(https://www.aiche.org/ccps/resources/publications/books/bow-ties-risk-management-concept-book-process-
safety)CCPS in association with the Energy Institute, 2018.
“Bowtie Analysis for Alarm Management”, D. Hatch, and A. Geddes, IChemE Alarm Systems and Controls Seminar &
Tyneside Process Safety Forum 2018.
our use
“The Buncefield of cookies.- More
Investigation” info (http://wikipedia.org/wiki/HTTP_cookie)
www.buncefieldinvestigation.gov.uk/reports/index.htm
WEBINAR: For additional information tune into the webinar “Do Bowties Have a Place in Alarm Management” on
April 22, 2020. (https://www.exida.com/Webinars/do-bow-ties-have-a-place-in-alarm-management)
Related Items
exida Alarm Management Services (https://www.exida.com/Alarm-Management)
Tagged as:  Todd Stauffer (https://www.exida.com/Blog/tag/Todd+Stauffer)  Risk

Management (https://www.exida.com/Blog/tag/Risk+Management)  bowties
(https://www.exida.com/Blog/tag/bowties)  Alarm Management
(https://www.exida.com/Blog/tag/Alarm+Management)
Other Blog Posts By Todd Stauffer

• Bow Ties Part II: Do Bow Ties have a place in Alarm Management?
(https://www.exida.com/Blog/bowties-part-ii-do-bow-ties-have-a-place-in-alarm-management)
• Bow Ties Part I: Great for Formal Occasions and for Risk Management
(https://www.exida.com/Blog/bow-ties-part-i-great-for-formal-occasions-and-for-risk-
management)
• Alarm Response Procedures: More than Just a Good Idea
(https://www.exida.com/Blog/alarm-response-procedures-more-than-just-a-good-idea)
• CSB Cites Lack of Alarm Management as Contributing Factors to Blowout in Oklahoma
(https://www.exida.com/Blog/csb-cites-lack-of-alarm-management-as-contributing-factors-to-
blowout-in-ok)
• Delivering Situation Awareness During an Alarm Flood: Throw Your Operators a Lifeline
(https://www.exida.com/Blog/delivering-situation-awareness-during-an-alarm-flood-throw-
your-operators)
0 Comments exida Disqus' Privacy Policy 
1 Login
 Recommend t Tweet f Share Sort by Best
Start the discussion…
LOG IN WITH OR SIGN UP WITH DISQUS ?
Name
✉ Subscribe d Add Disqus to your siteAdd DisqusAdd ⚠ Do Not Sell My Data
About Us
exida offers services, tools, and training to help organizations meet regulatory requirements,
achieve safe operations, and deliver results.
We work closely with our customers to achieve high-impact, cost-effective solutions for their
Functional Safety, Alarm Management, and IACS Cybersecurity challenges.
 (https://www.linkedin.com/company/exida-com)  (http://www.youtube.com/exidallc)
 (http://www.instagram.com/exidallc)  (https://twitter.com/exidaLLC)
 (http://www.facebook.com/exidaLLC)
Contact
 Germany +49-89-49000547
 USA +1-215-453-1720
 Canada +1-647-838-3377
 South Africa +27 31 2671564
 United Kingdom +44 (0) 19-266-76125
 Japan +81 50-5539-9507
 India +91-99-30-250-104
 Mexico +52-55-7572-4870
 Singapore +65 6222-5160

 Australia
our+61
use431 460 900
of cookies. More info (http://wikipedia.org/wiki/HTTP_cookie)
Newsletter
Receive our Newsletter that goes out to thousands of industry professionals every month.
Subscribe
© 2000 - 2020 exida.com LLC Privacy Policy (https://www.exida.com/Home/Privacy-Policy)Terms
and Conditions (https://www.exida.com/Home/terms-and-conditions)

Bow Ties Part II Do Bow Ties Have A Place in Alarm Management

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Bow Ties Part II Do Bow Ties Have A Place in Alarm Management

Uploaded by

Copyright:

Available Formats

 Contact Us (https://www.exida.

Write something and press enter

exida explains Blog

Bow Ties Part II: Do Bow Ties have a

As discussed in Part I (https://www.exida.com/Blog/bow-ties-part-i-great-for-formal-occasions-and-

Bow tie Diagram for Buncefield Incident

Multi-Level Bowtie Approach

Tagged as:  Todd Stauffer (https://www.exida.com/Blog/tag/Todd+Stauffer)  Risk

Other Blog Posts By Todd Stauffer

 Recommend t Tweet f Share Sort by Best

Start the discussion…

LOG IN WITH OR SIGN UP WITH DISQUS ?

✉ Subscribe d Add Disqus to your siteAdd DisqusAdd ⚠ Do Not Sell My Data

 South Africa +27 31 2671564

 United Kingdom +44 (0) 19-266-76125

 Japan +81 50-5539-9507

 Singapore +65 6222-5160

You might also like