Free GRC Tools
Bow-Tie Risk Analysis
Map threats and consequences around a central hazard event. Add preventive controls on the left, recovery controls on the right. Export your analysis to Markdown. Free — no account needed.
Threats
Phishing attack on employee
Weak or reused passwords
Third-party vendor compromise
Preventive Controls
MFA on all systems
Security awareness training
Vendor security reviews
Hazard Event
Data breach / Unauthorised access to customer data
Click to edit
Recovery Controls
Incident response plan
PR crisis communications plan
Cyber insurance coverage
Consequences
Regulatory fines (GDPR, CCPA)
Customer churn & reputational damage
Legal liability
Click any item to edit it.Click the hazard event to rename it.Hover an item to reveal the delete button.
Markdown export preview
## Bow-Tie Risk Analysis **Hazard Event:** Data breach / Unauthorised access to customer data ### Threats - Phishing attack on employee - Weak or reused passwords - Third-party vendor compromise ### Preventive Controls - MFA on all systems - Security awareness training - Vendor security reviews ### Consequences - Regulatory fines (GDPR, CCPA) - Customer churn & reputational damage - Legal liability ### Recovery Controls - Incident response plan - PR crisis communications plan - Cyber insurance coverage
Manage your full risk program in Flow
Link bow-tie analyses to your risk register, control library, and evidence collection — all in one platform.