I was wondering if anyone in the community has experience with implementing Risk Bow-Tie in ServiceNow IRM. Please refer to the attached image as an example of a Risk Bow-Tie, which includes the following components:
1. Controls (preventive = 4 and Mitigative = 3)
2. Event or Risk Event = Maritime spatial planning is not achieving objectives
3. Risk Source = Activities of the drivers operating within the management area
4. Cause or threat (total = 4
5. Consequences (total = 3)
My questions are as follows:
1. How can this bow tie be mapped to the IRM?
2. What information should be placed where? Specifically, what should go into the Risk Register and how should the Risk Statement be defined or what will be Risk Statement for this bow tie?
3. Where should the Risk Event component be added?
4. How can causes/threats be linked to a control, especially in cases where one control addresses multiple threats?
5. Similarly, how can consequences be mapped to a control?
6. Is it possible to generate a pictorial representation of the bow tie within the IRM?
