Bow Ties usually conjure up a vision of a formal event, to be used infrequently for special occasions. For risk bow ties, nothing could be further from the truth. Risk Bow Ties are ideally used by the business as everyday wear. So what are Risk Bow Ties and what is the value of making them part of your everyday?
The Bow Tie principal to analyse and document risk has been attributed back to Royal Dutch Shell in the 70’s / 80’s. Since then, oil and gas, mining and pharmaceutical companies amongst others have used the Bow Tie principle to explore and communicate risk. More recently, financial institutions have warmed to the idea, seeing the benefit of this simple, yet comprehensive method to understand and communicate risk.
The Bow Tie technique is a logical way to explore and communicate risk. Its principles are simple, but the execution and presentation need care.
I will attempt to explain the basic principles of the risk bow tie by way of a cooking analogy. Consider a pot of spaghetti with four ingredients. We will call them Causes, Events, Impacts, and Controls. The spaghetti links all of the ingredients together, but there are rules:
The spaghetti pot represents the risks in your business. Interconnected, complex and made up of different parts. Trying to analyse the complete pot in one go is too much for the human mind. As in most things that are overwhelming it is easier to look at a smaller subset of the whole.
Let’s call this subset a spaghetti serving. Using your hand, extract a portion of spaghetti but hold it in the middle of the spaghetti lengths. When you lift your hand, you will have half the spaghetti hanging from the left of your hand and the other half on the right.
Lay the spaghetti on a plate with the beginning of the spaghetti on the left and splay out the two ends while holding onto the centre.
No surprises, you will have a Bow Tie shape with the Cause ingredient on the left, the Event ingredients in the middle and the Impact ingredients on the right. Controls will attach everywhere.
Author of 'A Short Guide to Operational Risk', David Tattam is an internationally recognised specialist in all facets of risk management, particularly at the enterprise level. His career includes many years working with PwC, as well as two Australian banks. His achievements include the creation of the Middle Office (Risk Management Department) for The Industrial Bank of Japan in Australia and the complete implementation of all Australian operations, systems, procedures and controls for Westdeutsche Landesbank (WestLB).