What this is
What is a barrier health review?
What is a barrier health review?
A barrier health review is a periodic check on the specific barriers named in a bow tie analysis, confirming each one is still physically in place, still functioning, and still verified rather than assumed. It is run against ISO 31000 cl.6.6 monitoring and review, and it exists because barrier degradation is silent — nothing tells you a barrier has failed until either it's tested or it's needed.
How is this different from the Critical Control Verification record?
Critical Control Verification checks one specific control against its verification method on a schedule. Barrier Health Review is broader — it looks at every barrier named in a bow tie, hardware, procedural and human, and rolls the result into a single health judgement for that hazard's whole barrier set, using Critical Control Verification records as supporting evidence where they exist.
Why quarterly, and why also after a trigger event?
Quarterly is frequent enough to catch drift before it compounds across a full bow tie's barrier set, without demanding continuous verification effort the barrier owners can't sustain. A trigger event — a near-miss, a failed test, a process change — can reveal degradation immediately, and waiting for the next scheduled quarter to check would leave a known gap unaddressed in the meantime.
Scope
When is a barrier health review required?
This is a periodic verification against an existing bow tie's barrier set, not the analysis that identifies barriers in the first place and not a one-off check on a single control.
Use this template when
- A quarterly review interval has arrived for a hazard with an existing, linked bow tie analysis
- A trigger event — a near-miss, a failed verification, a process or equipment change — has occurred against a barrier this hazard depends on
- The Critical Control and Fatal Risk programme requires evidence that named barriers are still functioning, not just that they were once identified
- A linked Critical Control Verification record needs its result rolled into the wider barrier-set judgement for this hazard
- Management Review needs a current barrier health position for a fatal-risk hazard rather than the state captured at the original bow tie workshop
Do not use it for
- Bow Tie Analysis Record, which identifies the threats, top event, consequences and barriers in the first place — this review only checks barriers that already exist there.
- Critical Control Verification, which tests one named critical control against its specific verification method, feeding evidence into this broader review rather than replacing it.
- Enterprise Risk Register, which holds organisation-level risks above the level of an individual hazard's barrier set.
- Risk Acceptance Record, which documents a deliberate decision to accept a risk rather than checking whether existing controls for it are still working.
- Anything outside KnowComply, which belongs in the workspace that owns that process.
Compliance mapping
Which ISO 31000 cl.6.6 requirements does this satisfy?
ISO 31000 cl.6.6 covers monitoring and review of the risk management process — this record's sections walk from confirming verification actually happened, through rating each barrier type's current health, to how degradation gets responded to.
| Clause | Requirement | Where it lands |
|---|---|---|
| cl.6.6 Monitoring and review | Each barrier named in the linked bow tie is confirmed verified this period, with evidence, not assumed | Verification |
| cl.6.6 Monitoring and review | Critical barriers receive more frequent verification than non-critical ones | Verification |
| cl.6.6 Monitoring and review | Hardware, detection, procedural and competence barriers are each rated for current functioning, not treated as one undifferentiated group | Health |
| cl.6.6 Monitoring and review | Any barrier found degraded or absent is explicitly flagged rather than folded into an overall average | Health |
| cl.6.5 Risk treatment | Where a barrier is degraded, an interim control or work restriction is applied until it's restored | Response |
| cl.6.5 Risk treatment | The root cause of any barrier degradation is understood, not just the symptom repaired | Response |
| cl.6.6 Monitoring and review | Overall barrier health and the presence of any critical barrier absence are recorded as a single evaluated outcome | Outcome |
| cl.6.7 Recording and reporting | The result is marked as feeding Management Review before the record closes | Outcome |
What it does not cover
- Each Barrier Verified This Period marked Yes with no linked evidence, which means the review is recording an assumption rather than a check.
- Any Barrier Degraded Or Absent marked No despite Detection Systems Calibrated or Procedures Followed In Practice being marked Partly, which papers over a known gap in the headline judgement.
- Critical Barriers Verified More Often answered No, which means the barriers carrying the most weight in the bow tie are being checked on the same cadence as everything else.
- Degraded Barriers Compensated For left unanswered or No while a barrier has already been marked degraded, which leaves the site relying on a control it knows isn't working.
- Any Critical Barrier Absent marked Yes but Overall Barrier Health still recorded as Strong or Adequate, which contradicts the review's own finding and should never both be true at once.
Global
Barrier Health Review requirements by country
Barrier health review isn't itself a statutory form, but the regimes that expect a bow tie behind a major hazard also expect ongoing evidence its barriers still function.
COMAH Regulations 2015, safety report demonstration of adequate control
A COMAH safety report isn't a one-time submission — operators must demonstrate ongoing management of the measures it describes, and a dated barrier verification trail is what an HSE inspector will ask to see.
A site that can only produce the original bow tie, with no subsequent barrier health record, has a live gap an inspection will find.
OSHA Process Safety Management, 29 CFR 1910.119(j) — Mechanical integrity
The mechanical integrity provisions require inspection and testing of critical process equipment on an established frequency, the same discipline this review applies to barriers more broadly.
Where a barrier is also process safety equipment under PSM's scope, this review's cadence should align with, not duplicate, the PSM inspection schedule.
WHS Regulations — duty to maintain risk control measures (model Regulation 38)
Requires that risk control measures are reviewed and, if necessary, revised to maintain effectiveness, extending beyond installation to ongoing functioning.
A barrier identified once in a bow tie and never revisited would not satisfy this ongoing maintenance duty, independent of COMAH- or PSM-style regimes.
How to complete it
How to complete a barrier health review, step by step
The scoring is mechanical once the answers are in. The judgement sits in deciding whether those answers are honest, which is harder for a review that's asking barrier owners to mark their own work.
Each Barrier Verified This Period should mean someone actively confirmed the barrier, not that nothing went wrong this quarter. Push back on Yes answers that can't point to Verification Evidence Reviewed.
Critical Barriers Verified More Often exists because a barrier standing alone between a threat and the top event carries disproportionate weight over a redundant, non-critical one.
Marking Any Barrier Degraded Or Absent Yes without a matching Yes on Compensated For or Interim Controls Applied leaves the finding as a note rather than a response.
Root Cause Of Degradation Understood asks whether the barrier will degrade again for the same reason. A recalibrated detector with no root cause is a repair, not a fix.
What auditors find
Most common barrier health review findings
Reviews completed by the barrier owners themselves tend to repeat a small set of self-marking gaps.
| Finding | Clause | What fixes it |
|---|---|---|
| Verification marked Yes with no supporting evidence reference | cl.6.6 | Require Verification Evidence Reviewed as Yes, with a linked Control Verification ID, before Each Barrier Verified This Period can be accepted. |
| Overall Barrier Health rated Adequate or Strong despite a critical barrier marked absent | cl.6.6 | Enforce that Any Critical Barrier Absent Yes automatically caps Overall Barrier Health at Degraded — the two fields must never contradict each other. |
| Degraded barrier logged with no interim control or work restriction applied | cl.6.5 | Treat a Yes on Any Barrier Degraded Or Absent as incomplete until Compensated For, Interim Controls Applied, or Work Restricted is also answered. |
| Human and procedural barriers scored as reliably as hardware barriers | cl.6.6 | Weight Procedures Followed In Practice against direct observation, not the owner's own account, since procedural drift is the least visible degradation. |
| Next Review Due left blank or beyond the standard interval | cl.6.6 | Set Next Review Due at the standard quarterly interval unless a documented risk-based reason extends it. |
| Result not marked as feeding Management Review | cl.6.7 | Mark Feeds Management Review Yes whenever Overall Barrier Health is short of Strong, so degrading trends surface at the level resourcing decisions get made. |
Case in point
Case in point: the detector that passed every review until it didn't
A site's quarterly barrier health reviews for an ammonia release bow tie marked Detection Systems Calibrated Yes for six consecutive quarters, based on the barrier owner confirming the detector was 'still there and showing normal readings'. No calibration certificate was ever attached, and Verification Evidence Reviewed was answered Yes regardless.
An external audit asked for the calibration records and found the detector hadn't been formally calibrated in over two years — readings looked normal because the detector had drifted to reading everything as normal. The fix was procedural: Verification Evidence Reviewed now requires an attached calibration certificate before it can be marked Yes, closing the gap between 'looks fine' and 'verified fine'.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
6 sections
- Reference
- CMP-030
- Archetype
- Review
- Record ID
- BHR-2026-000
- Scoring
- Barriers effective
- Direction
- High is good
- Singleton
- Yes
- Basis
- ISO 31000 cl.6.6
- Links
- Links Bow tie, Critical control verification
- Tags
- Governance, Barriers
- Sections
- 6
- Fields
- 48
- Follow up fields
- 3
- Repeating sections
- 0
- Links out
- 4
Header
10 fieldsReview ID*
Auto sequence. Format BHR-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Bow Tie Reference*
Links to CMP-029 Analysis ID
Period Reviewed*
Reviewed By*
Barriers Degrade Quietly
Nothing announces that a barrier has stopped working. Detection fails calibration, procedures drift, and the assumption that it is intact is what fails.
Verification
6 fieldsEach Barrier Verified This Period*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Verification Evidence Reviewed*
- Yes3 pts
- Partly1 pt
- No0 pts
Verification Method Adequate*
- Yes3 pts
- Partly1 pt
- No0 pts
Critical Barriers Verified More Often*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Failed Verifications Actioned*
- Yes3 pts
- Partly1 pt
- No0 pts
Barrier Owners Engaged*
- Yes3 pts
- Partly1 pt
- No0 pts
Health
6 fieldsHardware Barriers Functioning*
- Yes3 pts
- Partly1 pt
- No0 pts
Detection Systems Calibrated*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Procedures Followed In Practice*
- Yes3 pts
- Partly1 pt
- No0 pts
Competence Barriers Current*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Maintenance Barriers On Schedule*
- Yes3 pts
- Partly1 pt
- No0 pts
Any Barrier Degraded Or Absent*
- Yes3 pts
- Partly1 pt
- No0 pts
Response
6 fieldsDegraded Barriers Compensated For*
- Yes3 pts
- Partly1 pt
- No0 pts
Interim Controls Applied*
- Yes3 pts
- Partly1 pt
- No0 pts
Work Restricted Where Needed*
- Yes3 pts
- Partly1 pt
- No0 pts
Escalated Where Critical*
- Yes3 pts
- Partly1 pt
- No0 pts
Repairs Prioritised*
- Yes3 pts
- Partly1 pt
- No0 pts
Root Cause Of Degradation Understood*
- Yes3 pts
- Partly1 pt
- No0 pts
Related records
1 fieldControl Verification ID
A verification used as evidence of barrier health.
Links to SAF-078 Verification ID
Outcome
19 fieldsBarriers Reviewed*
Barriers Degraded*
Overall Barrier Health*
- Strong4 pts
- Adequate2 pts
- Degraded0 pts
Any Critical Barrier Absent*
- No3 pts
- Yes0 pts
Feeds Management Review*
- Yes3 pts
- Partly1 pt
- No0 pts
Next Review Due*
Items Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Compliance Lead*
Signature*
Site Manager*
Second Signature*
CMP-030 · record IDs look like BHR-2026-000 · Links Bow tie, Critical control verification
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The review form is quick to complete. Making sure the verification behind it is real, and that a degrading pattern gets escalated rather than repeated quietly, is where the effort actually lives.
Holds the barrier health review library against its linked bow ties and critical control verifications, and flags any hazard whose review is overdue or whose critical barrier was marked absent.
Tracks calibration and maintenance schedules for hardware and detection barriers, so a missed maintenance task surfaces directly against the barrier it puts at risk before the next review cycle.
Confirms competence barriers are genuinely current by checking training and certification records against the barrier, rather than accepting a self-reported Yes on Competence Barriers Current.

Rolls barrier health results across sites into one view for Management Review, and holds every write for your approval before it touches a record.
This template lives in KnowComply — audit and governance. Audit programmes, legal register, management review, risk and certification.
Meet KnowComply→Glossary
Barrier Health Review definitions and key terms
- Barrier degradation
- The gradual, often invisible loss of a barrier's effectiveness — through drift, wear, procedural shortcut, or neglect — as distinct from a sudden, obvious failure.
- Verification evidence
- A documented test, inspection, calibration record or equivalent proof that a barrier was actually checked, rather than assumed to still be working.
- Critical barrier
- A barrier identified in the source bow tie as one that alone stands between a threat and the top event, warranting more frequent and more rigorous verification than the general barrier set.
- Interim control
- A temporary measure applied to compensate for a barrier known to be degraded or absent, kept in place until the original barrier is restored.
- Common cause failure
- When multiple barriers that appear independent share an underlying weakness, so a single failure removes protection at more than one point simultaneously.
FAQ
Frequently asked questions about barrier health review
Who should complete a barrier health review?+
The barrier owners named in the source bow tie, coordinated by whoever holds the fatal-risk programme, so the people accountable for a barrier are the ones confirming it.
What if a barrier no longer exists because the process has changed?+
That should feed back into an update of the source Bow Tie Analysis Record, not just a failed verification here — the barrier set itself needs re-establishing.
Does every barrier need to be individually documented in this record?+
The record captures a rolled-up judgement per category — hardware, detection, procedural, competence — with counts reviewed and degraded, backed by linked Critical Control Verification records where they exist.
What triggers a review outside the quarterly schedule?+
A near-miss, a failed test on any barrier, a process or equipment change, or any signal that a barrier's assumed state no longer matches reality.
Why does N/A appear as an option on some verification questions?+
Some barriers genuinely don't apply to every bow tie. N/A removes them from the denominator so the score reflects only the barriers that are relevant.
What if the same barrier degrades repeatedly across reviews?+
Escalate through Feeds Management Review rather than treating it as routine — a barrier degrading for the same root cause needs a structural fix, not another interim control.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Critical Control and Fatal Risk
Bow Tie Analysis Record
Maps threats, the top event, consequences and the barriers on each side for a major hazard
Critical Control Register
Lists the controls that stand between your people and a fatal or catastrophic event, with an owner and a required check frequency for each
Risk Assessment
The single risk assessment used across the whole business
Serious Potential Incident Report
Used when an event could have killed or seriously injured someone, whatever the actual outcome
Job Safety Analysis
Breaks a job into steps, finds the hazards in each and sets the controls
Pre-Task Risk Assessment
A short check done by the crew right before work starts, covering what has changed today
More in Risk Governance
Enterprise Risk Register
Holds the risks that could stop the organisation meeting its objectives, above the level of individual task risk
Risk Appetite Statement
States how much risk the organisation is prepared to accept in each domain, so decisions are consistent
Risk Acceptance Record
Records a deliberate decision to accept a risk rather than treat it, with who accepted it and for how long
Bow Tie Analysis Record
Maps threats, the top event, consequences and the barriers on each side for a major hazard

Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 31000:2018 cl.6.6 — Monitoring and review
- COMAH Regulations 2015 (SI 2015/483)
- OSHA Process Safety Management, 29 CFR 1910.119(j) — Mechanical integrity
- WHS Regulations — model Regulation 38, Duty to maintain risk control measures
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.