🔍 Introduction to Barrier Analysis Diagrams

Barrier Analysis Diagrams are used in root cause analysis to assess the effectiveness of controls or barriers that are meant to prevent or mitigate unwanted events. Common in internal audit and risk management, this tool helps identify where barriers failed, were missing, or were bypassed—leading to process failures or incidents. The method is especially useful when evaluating operational risks, safety breaches, or compliance breakdowns across departments.

🧰 Template for Applying Barrier Analysis Diagrams

Use the following steps to apply this technique practically:

• Step 1 – Define the Undesirable Event: What went wrong?

• Step 2 – Identify the Target: Who or what was affected?

• Step 3 – List Threats: What caused the event?

• Step 4 – Identify Barriers: What controls should have been in place?

• Step 5 – Analyze Barrier Status: Were they effective, failed, missing, or bypassed?

• Step 6 – Recommend Improvements: Strengthen or redesign key barriers.

🏢 Example: ACME Corporation – Data Breach Incident

At ACME, a recent data breach during a system upgrade prompted an internal audit by Auren, with support from Project Manager Aven and oversight by CEO Liora.

• Undesirable Event: Unauthorized access to customer data.

• Threat: External hacker exploited system vulnerability.

• Barriers Assessed:

  • Firewall: operational ✅

  • Access controls: misconfigured ❌

  • Change approval protocol: bypassed ❌

  • Staff training on security: inadequate ❌

Outcome: Auren’s audit report recommended reinforcing approval controls, improving IT staff training, and implementing automated access monitoring.