Riskbased oversight with proactive barrier performance verification Emma

Risk-based oversight with proactive barrier performance verification Emma Verschoor – Product Manager CGE Risk Management Solutions International Cross-Safety Conference, Amsterdam 2018 1 Copyright © CGE Risk MS BV

Emma Verschoor Product Manager e. verschoor@cgerisk. com 2

All models are false, but some are useful “(…) the practical question is how

Bowtie models Provide the right level of detail to facilitate understanding and risk based decision making, without oversimplifying. The right level of details depends on your goal. Copyright © CGE Risk MS BV

Fault tree & Event tree with barriers

Communicative version

3 questions 1. Do we understand what can go wrong? 2. Do we know what our systems are to prevent this happening? 3. Do we have the information to assure us they are working effectively? Copyright © CGE Risk MS BV

Bowtie in 8 steps 1. 2. 3. 4. 5. 6. 7. 8. Copyright ©

Barrier thinking Copyright © CGE Risk MS BV

Hazard Losses Copyright © CGE Risk MS BV

Hazard Losses Barriers Copyright © CGE Risk MS BV

Equipment failure Poor planning Fatigue Etc. Copyright © CGE Risk MS BV

History 1979 1988 90’s 00’s Copyright © CGE Risk MS BV

Bowtie today Oil & Gas Aviation Energy Chemical Mining Medical Financial Government Construction Cyber risk

Barrier-based auditing Easy to spot weak spots Results focus on risks, not categories Intuitive display

Traditional Audit Time scheduling Work procedures Maintenance Training & Competency Management system

Barrier-based auditing Time scheduling Work procedures Maintenance Training & Competency Management system

Barrier-based audits Q 01: (Maintenance) “Are the extinguishers well maintained and filled? ” Q 02: (Training) “Is the personnel capable of using the equipment? ” Q 03: (Procedures) “Is the personnel aware of where to find the device? ”

Audit approaches Traditional auditing Maintenance Training Compliance 95% 90% Barrier-based auditing

Criticality Threat importance Number of barriers Barrier independence

Survey scope using Bowties All questions for behavioral barriers All questions for driver All questions for critical barriers

Zoom-level Point in time

End goal

Case study: Fisheries and Oceans Canada

ISO 31000: 2018 28

The risk management process 29

Addressing uncertainties Detect Decide Act Implemented Partially implemented

3 questions 1. Do we understand what can go wrong? 2. Do we know what our systems are to prevent this happening? 3. Do we have the information to assure us they are working effectively?