Bow-Tie Industrial Risk Management Across Sectors. Luca Fiorentini

those covered by this treatise may also help to facilitate the reconstruction of the dynamics and root causes of the event itself.

      This last aspect, through the perspective of a legal practitioner, be it a lawyer or a judge, represents an essential technical and scientific support.

      The availability of a methodological and scientific approach since the preliminary phase of an event is a fundamental resource for the determination of the causes of a given event, of possible causes, and for the management of the related responsibilities.

      The legal issues surrounding safety issues are inseparably linked to technical issues; only a correct scientific reconstruction of the events, causes, and any possible relevant element in the dynamics of the event can allow legal practitioners to manage consequential aspects such as the traceability of the event to the responsibility of one person or another with the consequent distribution of the related burdens, including economic ones, that result from it.

      The collaboration between legal experts and experts of analysis, operational risk assessment is essential for the correct reconstruction of the events and for the proper conduct of investigations, checks aimed at the exclusion of responsibility, or the correct attribution of the same.

Preface 5

       Claudio De Angelis

       General Manager, National Fire Corp, Ministry of Interior, Italy

       Hypocrites! You know how to evaluate the appearance of the earth and the sky; why this weather (ton kairon) can’t you evaluate it?

       Luke 12, 56

      Krónos and Kairós were gods who impersonated the meanings that the Greeks attributed to time, one quantitative and the other qualitative.

      Kronos is the abstract time that flows; it is made of seconds, hours, seasons, years; it is what marks the flow of life towards the end and the functioning of things until the end of their usefulness, the place where we are continually placed before our limit.

Kairos (Figure 2), on the other hand, is qualitative; it is the right time to live (or work); the right time to be or do.

Figure 2 Bas‐relief depicting the god Kairos.

Figure 3 The epistemological meaning of security.

As can be seen in Figure 3, to be “safe,” from the Latin securum [se (sine) + cure], means to be in a state without breathlessness, without worry. This is what must be guaranteed to the users of a building or activity in daily use.

      This means that the safety of a building or activity lives in Kairos and not in Kronos, i.e. in the time for which it is designed, the “appropriate” time for which it is made, during which people’s attention must be focused on what they have to do, certain that their safety is guaranteed if they respect simple ordinary ways of use.

      The complexity of fire safety in construction means that the majority of designers see it as a specialization.

      The emergence in the design of unusual technical‐scientific problems, the complex problems related to the construction phase of the Opera, with the need to collect documentation and certifications during the project, the need to guarantee the expected performance of the protection measures over time (with reference to a service life of at least 50 years), and the economic value of these problems require analysis and study of unusual topics and problems.

      For constructions of the past, for which safety in everyday use was a modest concern (it was considered sufficient to have a roof over one’s head) and design methods were simple and inaccurate, even the incorrect and approximate definitions of safety were sufficient.

      For today’s sophisticated constructions rich in systems, where the theory of statics is replaced by theories of dynamics, where the description of fire as temperature is replaced by fluid dynamics models, and where the behaviour of materials is described by entropic theories, it is necessary to “chase” and better define the meaning of safety.

      The correct measurement of safety through risk analysis is one of these issues.

      Safety science is the discipline that studies risk in its various forms, direct and indirect, with the aim of reducing it to the minimum possible and controlling its consequences.

      We speak of “reduction” of risk because, obviously, its complete elimination is mathematically impossible both because the risk variables are infinite and imponderable, and because zero risk is a theoretical limit that cannot be reached, the same as absolute zero for temperature.

      As you know, the safety cycle is based on three parameters:

      1 Risk analysis

      2 The choice of prevention and protection measures

      3 Security management

A correct and complete analysis is therefore the basis of the design.

      In accordance with the RAMS (Reliability, Availability, Maintainability, and Safety) definitions proposed by the IEC 61508 standard, today we therefore define safety as the condition of a system characterized by a tolerable accident risk.

      This volume is about the Bow‐Tie method which, although very old, is still one of the most widespread methods for risk analysis and is well suited to approach risk analysis and management in a structured way and with a strong communicative impact because of its immediacy and because it is simpler than the combination of fault tree and event tree analyses, especially for non‐experts and stakeholders in general.

      The Bow‐Tie is a risk analysis tool with a characteristic “bow tie” shape. The diagrams consist of a fault tree connected to an event tree. The junction point, the centre of the bow tie, represents the critical event under examination.

      This method can also be used quantitatively and therefore validly used both in the world of industrial risk and for a more in‐depth conventional fire risk assessment than possible with qualitative methods, such as those of the Fire Prevention Code or Legislative Decree 81.

      This volume shows how you can easily set the basis for a more structured reasoning, regardless of the field of application. In every field of technology, risk has causes, consequences, and control measures (preventive and mitigative), which are generally referred to as “barriers” (the Swiss cheese slices from Reason).

      The operation or non‐operation of control measures affects the level of risk over time and the non‐operation (or failure of a barrier) is in turn a function of a number of aspects: maintenance, information, training, calibration, and so forth. This allows the use of the paradigm to also support the management system.

      By analyzing data relating to negative episodes (accidents, if we are talking about safety) it is possible to understand what the failed barriers are, how they link together, and, therefore, the causes of failure, facilitating the analysis of the root causes.

      This approach can also be extended to ordinary fire prevention.

      The application of this technique makes it possible to analyze a pool of fire scenarios considered representative and sufficiently exhaustive of fire safety risks. Each scenario can be characterized both in probabilistic terms and in terms