Knowella

Barrier Health Review

The recurring failure isn't a barrier that visibly breaks — it's one that quietly stops working while everyone keeps assuming it's fine. A detector drifts out of calibration, a procedure gets shortcut under time pressure, a hardware barrier corrodes behind a panel nobody opens. The bow tie said the barrier existed. Nothing in the intervening quarter announced that it no longer does, which is exactly why this review has to go and check rather than ask whether anyone remembers a problem.

KnowComplyReviewCMP-03048 fields across 6 sectionsFull researchSee the form

Reviewed by Siddarth SinghCSPLast reviewed 16 August 2026

Basis
ISO 31000 cl.6.6
Workspace
KnowComply
Form type
Review
Completed by
Carried out by the barrier owners
Frequency
Quarterly for major hazards, and after any trigger event

The short version

  • This review exists because barriers degrade silently — detection drifts out of calibration, procedures get shortcut, hardware corrodes — and nothing announces the failure until the barrier is tested or needed.
  • It checks every barrier named in a linked bow tie, not just the critical ones, and separately rates hardware, detection, procedural and competence barriers because they fail in different ways and at different rates.
  • Any critical barrier found absent or degraded should stop the record short of a Pass, regardless of how well the rest of the barrier set scores.
  • The review is meant to feed Management Review directly, so a pattern of degrading barriers across sites becomes visible at the level where resourcing decisions actually get made.

What this is

What is a barrier health review?

What is a barrier health review?

A barrier health review is a periodic check on the specific barriers named in a bow tie analysis, confirming each one is still physically in place, still functioning, and still verified rather than assumed. It is run against ISO 31000 cl.6.6 monitoring and review, and it exists because barrier degradation is silent — nothing tells you a barrier has failed until either it's tested or it's needed.

How is this different from the Critical Control Verification record?

Critical Control Verification checks one specific control against its verification method on a schedule. Barrier Health Review is broader — it looks at every barrier named in a bow tie, hardware, procedural and human, and rolls the result into a single health judgement for that hazard's whole barrier set, using Critical Control Verification records as supporting evidence where they exist.

Why quarterly, and why also after a trigger event?

Quarterly is frequent enough to catch drift before it compounds across a full bow tie's barrier set, without demanding continuous verification effort the barrier owners can't sustain. A trigger event — a near-miss, a failed test, a process change — can reveal degradation immediately, and waiting for the next scheduled quarter to check would leave a known gap unaddressed in the meantime.

Scope

When is a barrier health review required?

This is a periodic verification against an existing bow tie's barrier set, not the analysis that identifies barriers in the first place and not a one-off check on a single control.

Use this template when

  • A quarterly review interval has arrived for a hazard with an existing, linked bow tie analysis
  • A trigger event — a near-miss, a failed verification, a process or equipment change — has occurred against a barrier this hazard depends on
  • The Critical Control and Fatal Risk programme requires evidence that named barriers are still functioning, not just that they were once identified
  • A linked Critical Control Verification record needs its result rolled into the wider barrier-set judgement for this hazard
  • Management Review needs a current barrier health position for a fatal-risk hazard rather than the state captured at the original bow tie workshop

Do not use it for

  • Bow Tie Analysis Record, which identifies the threats, top event, consequences and barriers in the first place — this review only checks barriers that already exist there.
  • Critical Control Verification, which tests one named critical control against its specific verification method, feeding evidence into this broader review rather than replacing it.
  • Enterprise Risk Register, which holds organisation-level risks above the level of an individual hazard's barrier set.
  • Risk Acceptance Record, which documents a deliberate decision to accept a risk rather than checking whether existing controls for it are still working.
  • Anything outside KnowComply, which belongs in the workspace that owns that process.

Compliance mapping

Which ISO 31000 cl.6.6 requirements does this satisfy?

ISO 31000 cl.6.6 covers monitoring and review of the risk management process — this record's sections walk from confirming verification actually happened, through rating each barrier type's current health, to how degradation gets responded to.

ClauseRequirementWhere it lands
cl.6.6 Monitoring and reviewEach barrier named in the linked bow tie is confirmed verified this period, with evidence, not assumedVerification
cl.6.6 Monitoring and reviewCritical barriers receive more frequent verification than non-critical onesVerification
cl.6.6 Monitoring and reviewHardware, detection, procedural and competence barriers are each rated for current functioning, not treated as one undifferentiated groupHealth
cl.6.6 Monitoring and reviewAny barrier found degraded or absent is explicitly flagged rather than folded into an overall averageHealth
cl.6.5 Risk treatmentWhere a barrier is degraded, an interim control or work restriction is applied until it's restoredResponse
cl.6.5 Risk treatmentThe root cause of any barrier degradation is understood, not just the symptom repairedResponse
cl.6.6 Monitoring and reviewOverall barrier health and the presence of any critical barrier absence are recorded as a single evaluated outcomeOutcome
cl.6.7 Recording and reportingThe result is marked as feeding Management Review before the record closesOutcome

What it does not cover

  • Each Barrier Verified This Period marked Yes with no linked evidence, which means the review is recording an assumption rather than a check.
  • Any Barrier Degraded Or Absent marked No despite Detection Systems Calibrated or Procedures Followed In Practice being marked Partly, which papers over a known gap in the headline judgement.
  • Critical Barriers Verified More Often answered No, which means the barriers carrying the most weight in the bow tie are being checked on the same cadence as everything else.
  • Degraded Barriers Compensated For left unanswered or No while a barrier has already been marked degraded, which leaves the site relying on a control it knows isn't working.
  • Any Critical Barrier Absent marked Yes but Overall Barrier Health still recorded as Strong or Adequate, which contradicts the review's own finding and should never both be true at once.

Global

Barrier Health Review requirements by country

Barrier health review isn't itself a statutory form, but the regimes that expect a bow tie behind a major hazard also expect ongoing evidence its barriers still function.

United Kingdom

COMAH Regulations 2015, safety report demonstration of adequate control

A COMAH safety report isn't a one-time submission — operators must demonstrate ongoing management of the measures it describes, and a dated barrier verification trail is what an HSE inspector will ask to see.

A site that can only produce the original bow tie, with no subsequent barrier health record, has a live gap an inspection will find.

United States

OSHA Process Safety Management, 29 CFR 1910.119(j) — Mechanical integrity

The mechanical integrity provisions require inspection and testing of critical process equipment on an established frequency, the same discipline this review applies to barriers more broadly.

Where a barrier is also process safety equipment under PSM's scope, this review's cadence should align with, not duplicate, the PSM inspection schedule.

Australia

WHS Regulations — duty to maintain risk control measures (model Regulation 38)

Requires that risk control measures are reviewed and, if necessary, revised to maintain effectiveness, extending beyond installation to ongoing functioning.

A barrier identified once in a bow tie and never revisited would not satisfy this ongoing maintenance duty, independent of COMAH- or PSM-style regimes.

How to complete it

How to complete a barrier health review, step by step

The scoring is mechanical once the answers are in. The judgement sits in deciding whether those answers are honest, which is harder for a review that's asking barrier owners to mark their own work.

Is 'verified' backed by a test, or by absence of complaint

Each Barrier Verified This Period should mean someone actively confirmed the barrier, not that nothing went wrong this quarter. Push back on Yes answers that can't point to Verification Evidence Reviewed.

Does the critical barrier get more scrutiny, not just a mention

Critical Barriers Verified More Often exists because a barrier standing alone between a threat and the top event carries disproportionate weight over a redundant, non-critical one.

Does a degraded barrier trigger an actual interim control

Marking Any Barrier Degraded Or Absent Yes without a matching Yes on Compensated For or Interim Controls Applied leaves the finding as a note rather than a response.

Is the root cause understood, or is the symptom just repaired

Root Cause Of Degradation Understood asks whether the barrier will degrade again for the same reason. A recalibrated detector with no root cause is a repair, not a fix.

What auditors find

Most common barrier health review findings

Reviews completed by the barrier owners themselves tend to repeat a small set of self-marking gaps.

FindingClauseWhat fixes it
Verification marked Yes with no supporting evidence referencecl.6.6Require Verification Evidence Reviewed as Yes, with a linked Control Verification ID, before Each Barrier Verified This Period can be accepted.
Overall Barrier Health rated Adequate or Strong despite a critical barrier marked absentcl.6.6Enforce that Any Critical Barrier Absent Yes automatically caps Overall Barrier Health at Degraded — the two fields must never contradict each other.
Degraded barrier logged with no interim control or work restriction appliedcl.6.5Treat a Yes on Any Barrier Degraded Or Absent as incomplete until Compensated For, Interim Controls Applied, or Work Restricted is also answered.
Human and procedural barriers scored as reliably as hardware barrierscl.6.6Weight Procedures Followed In Practice against direct observation, not the owner's own account, since procedural drift is the least visible degradation.
Next Review Due left blank or beyond the standard intervalcl.6.6Set Next Review Due at the standard quarterly interval unless a documented risk-based reason extends it.
Result not marked as feeding Management Reviewcl.6.7Mark Feeds Management Review Yes whenever Overall Barrier Health is short of Strong, so degrading trends surface at the level resourcing decisions get made.

Case in point

Case in point: the detector that passed every review until it didn't

A site's quarterly barrier health reviews for an ammonia release bow tie marked Detection Systems Calibrated Yes for six consecutive quarters, based on the barrier owner confirming the detector was 'still there and showing normal readings'. No calibration certificate was ever attached, and Verification Evidence Reviewed was answered Yes regardless.

An external audit asked for the calibration records and found the detector hadn't been formally calibrated in over two years — readings looked normal because the detector had drifted to reading everything as normal. The fix was procedural: Verification Evidence Reviewed now requires an attached calibration certificate before it can be marked Yes, closing the gap between 'looks fine' and 'verified fine'.

The template

The template, field by field

The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.

48fields
6 sections
Reference
CMP-030
Archetype
Review
Record ID
BHR-2026-000
Scoring
Barriers effective
Direction
High is good
Singleton
Yes
Basis
ISO 31000 cl.6.6
Links
Links Bow tie, Critical control verification
Tags
Governance, Barriers
Sections
6
Fields
48
Follow up fields
3
Repeating sections
0
Links out
4
Field typesOwn ID, generated on saveCase thread and parentPick list from a registryLinked to another templateFollow up, dashed outlineScored

Header

10 fields
Text

Review ID*

Generated on save

Auto sequence. Format BHR-2026-000.

The record's own ID. Other templates point at this value.

Single Choice

Status*

Scored

Drives who this goes to next.

  • Planned2 pts
  • In progress2 pts
  • Complete3 pts
  • Deferred0 pts
  • Open0 pts
  • Closed3 pts
  • Overdue0 pts
Date & Time

Date and Time*

Users

Completed By*

Pick List

Site*

From FDN-001 Site NameFilter: Status is Active
Text

Site ID*

Linked

Format SITE-000.

Links to FDN-001 Site ID

Text

Bow Tie Reference*

Linked

Links to CMP-029 Analysis ID

Text

Period Reviewed*

Users

Reviewed By*

Info

Barriers Degrade Quietly

Nothing announces that a barrier has stopped working. Detection fails calibration, procedures drift, and the assumption that it is intact is what fails.

Verification

6 fields
Single Choice

Each Barrier Verified This Period*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Verification Evidence Reviewed*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Verification Method Adequate*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Critical Barriers Verified More Often*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Failed Verifications Actioned*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Barrier Owners Engaged*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts

Health

6 fields
Single Choice

Hardware Barriers Functioning*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Detection Systems Calibrated*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Procedures Followed In Practice*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Competence Barriers Current*

Scored
  • Yes2 pts
  • No0 pts
  • N/Aexcluded from denominator
Single Choice

Maintenance Barriers On Schedule*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Any Barrier Degraded Or Absent*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts

Response

6 fields
Single Choice

Degraded Barriers Compensated For*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Interim Controls Applied*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Work Restricted Where Needed*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Escalated Where Critical*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Repairs Prioritised*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Single Choice

Root Cause Of Degradation Understood*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts

Related records

1 field
Text

Control Verification ID

OptionalLinked

A verification used as evidence of barrier health.

Links to SAF-078 Verification ID

Outcome

19 fields
Numeric Answer

Barriers Reviewed*

Scored
Numeric Answer

Barriers Degraded*

Scored
Single Choice

Overall Barrier Health*

Scored
  • Strong4 pts
  • Adequate2 pts
  • Degraded0 pts
Single Choice

Any Critical Barrier Absent*

Scored
  • No3 pts
  • Yes0 pts
Single Choice

Feeds Management Review*

Scored
  • Yes3 pts
  • Partly1 pt
  • No0 pts
Date & Time

Next Review Due*

Numeric Answer

Items Assessed*

Excludes anything marked N/A.

Numeric Answer

Items Failed*

Numeric Answer

Score Percent*

Scored

Calculated on submission. High is good. N/A items leave the denominator.

Single Choice

Result Band*

Scored
  • Pass3 pts
  • Caution1 pt
  • Fail0 pts
Numeric Answer

Completeness Percent*

How much of the template was actually answered. A high score on a half completed form is not a high score.

Single Choice

Action Required*

Scored

Raise the action record, then enter its reference here.

  • No2 pts
  • Yes0 pts
Single Choice

Priority

OptionalScoredShows if Action Required equals Yes
  • High0 pts
  • Medium1 pt
  • Low3 pts
Text

CAPA ID

OptionalLinkedShows if Action Required equals Yes

Format CAPA-2026-00000.

Links to FDN-014 CAPA ID

Users

Action Owner

OptionalShows if Action Required equals Yes
Users

Compliance Lead*

Signature

Signature*

Users

Site Manager*

Signature

Second Signature*

CMP-030 · record IDs look like BHR-2026-000 · Links Bow tie, Critical control verification

Open in Knowella

Run it with agents

From a document you fill in to a programme that runs itself

The review form is quick to complete. Making sure the verification behind it is real, and that a degrading pattern gets escalated rather than repeated quietly, is where the effort actually lives.

KnowComply

Holds the barrier health review library against its linked bow ties and critical control verifications, and flags any hazard whose review is overdue or whose critical barrier was marked absent.

KnowMaintain

Tracks calibration and maintenance schedules for hardware and detection barriers, so a missed maintenance task surfaces directly against the barrier it puts at risk before the next review cycle.

KnowTrain

Confirms competence barriers are genuinely current by checking training and certification records against the barrier, rather than accepting a self-reported Yes on Competence Barriers Current.

Ella
Ella

Rolls barrier health results across sites into one view for Management Review, and holds every write for your approval before it touches a record.

This template lives in KnowComply — audit and governance. Audit programmes, legal register, management review, risk and certification.

Meet KnowComply→

Glossary

Barrier Health Review definitions and key terms

Barrier degradation
The gradual, often invisible loss of a barrier's effectiveness — through drift, wear, procedural shortcut, or neglect — as distinct from a sudden, obvious failure.
Verification evidence
A documented test, inspection, calibration record or equivalent proof that a barrier was actually checked, rather than assumed to still be working.
Critical barrier
A barrier identified in the source bow tie as one that alone stands between a threat and the top event, warranting more frequent and more rigorous verification than the general barrier set.
Interim control
A temporary measure applied to compensate for a barrier known to be degraded or absent, kept in place until the original barrier is restored.
Common cause failure
When multiple barriers that appear independent share an underlying weakness, so a single failure removes protection at more than one point simultaneously.

FAQ

Frequently asked questions about barrier health review

Who should complete a barrier health review?+

The barrier owners named in the source bow tie, coordinated by whoever holds the fatal-risk programme, so the people accountable for a barrier are the ones confirming it.

What if a barrier no longer exists because the process has changed?+

That should feed back into an update of the source Bow Tie Analysis Record, not just a failed verification here — the barrier set itself needs re-establishing.

Does every barrier need to be individually documented in this record?+

The record captures a rolled-up judgement per category — hardware, detection, procedural, competence — with counts reviewed and degraded, backed by linked Critical Control Verification records where they exist.

What triggers a review outside the quarterly schedule?+

A near-miss, a failed test on any barrier, a process or equipment change, or any signal that a barrier's assumed state no longer matches reality.

Why does N/A appear as an option on some verification questions?+

Some barriers genuinely don't apply to every bow tie. N/A removes them from the denominator so the score reflects only the barriers that are relevant.

What if the same barrier degrades repeatedly across reviews?+

Escalate through Feeds Management Review rather than treating it as routine — a barrier degrading for the same root cause needs a structural fix, not another interim control.

Keep going

Related templates and programmes

Industries this is written for

Siddarth Singh

Written and reviewed by

Siddarth Singh

Founder & Chief Executive Officer, Knowella

Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.

  • Certified Safety Professional (CSP), Board of Certified Safety Professionals
  • MBA, University of Chicago Booth School of Business
  • MS and BS, The Ohio State University, Industrial and Systems Engineering
  • Six Sigma Black Belt
Verify with BCSP →

Sources and last review. Reviewed 16 August 2026 against:

  • ISO 31000:2018 cl.6.6 — Monitoring and review
  • COMAH Regulations 2015 (SI 2015/483)
  • OSHA Process Safety Management, 29 CFR 1910.119(j) — Mechanical integrity
  • WHS Regulations — model Regulation 38, Duty to maintain risk control measures

This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.

Start in Minutes, Not Weeks

Launch a Ready-Made Template and Customize It Your Way

Every template is fully editable. Adjust fields, workflows, and branding to match your processes, then deploy to your team instantly.