Swiss cheese model examples.
Same tool, four requests. Every drawing below is a real render.
Rather start from a finished drawing? Browse 8 bowtie diagram templates →
What the Swiss cheese model is.
The Swiss cheese model explains accidents as failures that pass through several imperfect layers of defence. Each layer can have weaknesses, and harm becomes possible when the relevant weaknesses align.
This page uses a bowtie diagram to make those layers actionable: threats and preventative controls sit before the top event, while consequences and recovery controls sit after it. The model is qualitative, not a probability calculation.
- Standard
- CCPS / Energy Institute 2018
- Also follows
- IEC 31010:2019 §B.4.6 · ICAO Doc 9859 · Swiss-cheese lineage (Reason 1990)
- Engine
- schematex-bowtie
- Editable
- Double-click text, drag nodes
- Export
- SVG · PNG · PDF
Who uses Swiss cheese models.
Medication and falls reviews that separate prevention from recovery after an error.
A shared view of sterile practice, timing checks and postoperative detection.
Layered defences in an operational incident discussed with owners for each barrier.
How to make a Swiss cheese model in three steps.
Describe it
One paragraph is enough to start.
See the drawing
Drawn by the right engine.
Say what changes
Every edit keeps a version.
Common questions
What is the Swiss cheese model?
It is a safety model in which several layers of defence each have weaknesses. An incident can occur when weaknesses in relevant layers align.
What is a top event?
It is the central loss of control between threats and consequences, such as a patient fall or unauthorised runway entry.
What are recovery barriers?
They are controls that detect, contain or reduce harm after the top event has happened.
Is the Swiss cheese model quantitative?
No. It is a qualitative way to discuss defences, weaknesses and ownership. Use dedicated analysis methods when probabilities are needed.
Other drawings for the same work.
Map your safety defences now.
Free account, no card. Describe the hazard, threats, barriers and consequences.
Open the editor