ChatDiagram
Tools/Swiss cheese model maker

Swiss cheese model maker.

Describe a safety scenario and map its layers of defence with a Swiss cheese model. This bowtie view shows the threats that can pass through preventative controls, the top event, and the recovery barriers that limit harm.

Bowtie Risk DiagramEnter to send

Free account, no card · Export SVG, PNG or PDF

See it work

Swiss cheese model examples.

Same tool, four requests. Every drawing below is a real render.

What you type
A medication administration bowtie: the hazard is medications used in patient care and the top event is a wrong medication reaching the patient. Show look-alike packaging, interruptions and incorrect patient identification as threats, with scanning, storage, protected rounds, records and identity checks as barriers. Show adverse reaction, ongoing treatment harm and delayed care with observation, rapid response, pharmacist, incident, prescriber and care-plan barriers.
Then tryAdd a dose calculation error threatAdd an allergy alert barrier
Bowtie risk diagram: Medication safeguards
Bowtie risk diagram · CCPS / Energy Institute 2018 · schematex-bowtie

Rather start from a finished drawing? Browse 8 bowtie diagram templates →

The drawing

What the Swiss cheese model is.

The Swiss cheese model explains accidents as failures that pass through several imperfect layers of defence. Each layer can have weaknesses, and harm becomes possible when the relevant weaknesses align.

This page uses a bowtie diagram to make those layers actionable: threats and preventative controls sit before the top event, while consequences and recovery controls sit after it. The model is qualitative, not a probability calculation.

Standard
CCPS / Energy Institute 2018
Also follows
IEC 31010:2019 §B.4.6 · ICAO Doc 9859 · Swiss-cheese lineage (Reason 1990)
Engine
schematex-bowtie
Editable
Double-click text, drag nodes
Export
SVG · PNG · PDF
Bowtie risk diagram: What the Swiss cheese model is
Who uses it

Who uses Swiss cheese models.

Bowtie risk diagram: Patient-safety teamsPatient-safety teams

Medication and falls reviews that separate prevention from recovery after an error.

Bowtie risk diagram: Perioperative teamsPerioperative teams

A shared view of sterile practice, timing checks and postoperative detection.

Bowtie risk diagram: Safety managersSafety managers

Layered defences in an operational incident discussed with owners for each barrier.

How it works

How to make a Swiss cheese model in three steps.

01

Describe it

One paragraph is enough to start.

“A medication administration bowtie: the hazard is medications used in patient care and the top event is a wrong medication reaching the patient. Show look-alike packaging, interruptions and incorrect patient identification as threats, with scanning, storage, protected rounds, records and identity checks as barriers. Show adverse reaction, ongoing treatment harm and delayed care with observation, rapid response, pharmacist, incident, prescriber and care-plan barriers.”
02

See the drawing

Drawn by the right engine.

Bowtie risk diagram: Medication safeguards
03

Say what changes

Every edit keeps a version.

Add a dose calculation error threat
V2 · DRAWN FROM V1, NOTHING RETYPED
FAQ

Common questions

What is the Swiss cheese model?

It is a safety model in which several layers of defence each have weaknesses. An incident can occur when weaknesses in relevant layers align.

What is a top event?

It is the central loss of control between threats and consequences, such as a patient fall or unauthorised runway entry.

What are recovery barriers?

They are controls that detect, contain or reduce harm after the top event has happened.

Is the Swiss cheese model quantitative?

No. It is a qualitative way to discuss defences, weaknesses and ownership. Use dedicated analysis methods when probabilities are needed.

Related tools

Other drawings for the same work.

Map your safety defences now.

Free account, no card. Describe the hazard, threats, barriers and consequences.

Open the editor