


{"id":715,"date":"2019-11-20T00:01:00","date_gmt":"2019-11-20T00:01:00","guid":{"rendered":"https:\/\/alminawi.com\/?p=715"},"modified":"2025-08-16T13:58:21","modified_gmt":"2025-08-16T13:58:21","slug":"tts-series-b-logical-and-analytical-techniques-episode-10-barrier-analysis","status":"publish","type":"post","link":"https:\/\/e.americanpro.org\/?p=715","title":{"rendered":"T&#038;Ts Series B, Logical and Analytical Techniques, Episode 10: Barrier Analysis"},"content":{"rendered":"<h3 data-start=\"89\" data-end=\"120\">\ud83d\udd0d Introduction to the Tool<\/h3>\n<p data-start=\"122\" data-end=\"565\"><strong data-start=\"122\" data-end=\"142\">Barrier Analysis<\/strong> is a technique used to identify how and why a failure or risk was not prevented. It focuses on the effectiveness of existing safeguards\u2014called \u201cbarriers\u201d\u2014designed to stop undesired outcomes. This tool is especially helpful in <strong data-start=\"369\" data-end=\"387\">Internal Audit<\/strong> and <strong data-start=\"392\" data-end=\"414\">Project Management<\/strong> when reviewing incidents, non-conformances, or risk exposure. It helps organizations understand which barriers failed, were missing, or were bypassed.<\/p>\n<hr data-start=\"567\" data-end=\"570\" \/>\n<h3 data-start=\"572\" data-end=\"617\">\ud83d\udee0 Template for Applying Barrier Analysis<\/h3>\n<p data-start=\"619\" data-end=\"668\">The following steps provide a practical approach:<\/p>\n<ul data-start=\"670\" data-end=\"1200\">\n<li data-start=\"670\" data-end=\"779\">\n<p data-start=\"672\" data-end=\"779\"><strong data-start=\"672\" data-end=\"712\">Step 1: Identify the Undesired Event<\/strong><br data-start=\"712\" data-end=\"715\" \/>Clearly define the incident, error, or failure being analyzed.<\/p>\n<\/li>\n<li data-start=\"780\" data-end=\"907\">\n<p data-start=\"782\" data-end=\"907\"><strong data-start=\"782\" data-end=\"816\">Step 2: List Existing Barriers<\/strong><br data-start=\"816\" data-end=\"819\" \/>Include all preventive, detective, and corrective controls intended to stop the event.<\/p>\n<\/li>\n<li data-start=\"908\" data-end=\"1008\">\n<p data-start=\"910\" data-end=\"1008\"><strong data-start=\"910\" data-end=\"943\">Step 3: Assess Barrier Status<\/strong><br data-start=\"943\" data-end=\"946\" \/>For each barrier, ask: Was it effective, missing, or failed?<\/p>\n<\/li>\n<li data-start=\"1009\" data-end=\"1103\">\n<p data-start=\"1011\" data-end=\"1103\"><strong data-start=\"1011\" data-end=\"1052\">Step 4: Determine Why Barriers Failed<\/strong><br data-start=\"1052\" data-end=\"1055\" \/>Analyze the cause behind each barrier failure.<\/p>\n<\/li>\n<li data-start=\"1104\" data-end=\"1200\">\n<p data-start=\"1106\" data-end=\"1200\"><strong data-start=\"1106\" data-end=\"1140\">Step 5: Recommend Improvements<\/strong><br data-start=\"1140\" data-end=\"1143\" \/>Propose how to strengthen or implement better barriers.<\/p>\n<\/li>\n<\/ul>\n<hr data-start=\"1202\" data-end=\"1205\" \/>\n<h3 data-start=\"1207\" data-end=\"1255\">\ud83c\udfe2 Example \u2013 ACME Corp: Data Breach Incident<\/h3>\n<p data-start=\"1257\" data-end=\"1417\"><strong data-start=\"1257\" data-end=\"1272\">ACME Corp\u2019s<\/strong> Internal Audit team, led by <strong data-start=\"1301\" data-end=\"1310\">Auren<\/strong>, investigated a data breach that exposed client records. The incident was analyzed using Barrier Analysis.<\/p>\n<ul data-start=\"1419\" data-end=\"1670\">\n<li data-start=\"1419\" data-end=\"1480\">\n<p data-start=\"1421\" data-end=\"1480\"><strong data-start=\"1421\" data-end=\"1440\">Undesired Event<\/strong>: Unauthorized access to sensitive data.<\/p>\n<\/li>\n<li data-start=\"1481\" data-end=\"1670\">\n<p data-start=\"1483\" data-end=\"1505\"><strong data-start=\"1483\" data-end=\"1504\">Barriers Reviewed<\/strong>:<\/p>\n<ul data-start=\"1508\" data-end=\"1670\">\n<li data-start=\"1508\" data-end=\"1568\">\n<p data-start=\"1510\" data-end=\"1568\">Password security (ineffective \u2013 default credentials used)<\/p>\n<\/li>\n<li data-start=\"1571\" data-end=\"1610\">\n<p data-start=\"1573\" data-end=\"1610\">Multi-factor authentication (missing)<\/p>\n<\/li>\n<li data-start=\"1613\" data-end=\"1670\">\n<p data-start=\"1615\" data-end=\"1670\">Access logs monitoring (failed \u2013 alerts not configured)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p data-start=\"1672\" data-end=\"1925\"><strong data-start=\"1672\" data-end=\"1696\">Project Manager Aven<\/strong> and the IT Team were involved in the review. <strong data-start=\"1742\" data-end=\"1755\">CEO Liora<\/strong> mandated corrective action: implement MFA, audit user access monthly, and automate security alerts. A follow-up audit showed improved compliance and no further breaches.<\/p>\n<hr data-start=\"1927\" data-end=\"1930\" \/>\n<p data-start=\"1932\" data-end=\"2146\" data-is-last-node=\"\" data-is-only-node=\"\"><strong data-start=\"1932\" data-end=\"1946\">Conclusion<\/strong>: Barrier Analysis helped ACME identify control weaknesses that directly led to the breach. By focusing on what failed and why, Auren and team built stronger defenses and reduced future risk exposure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ud83d\udd0d Introduction to the Tool Barrier Analysis is a technique used to identify how and why a failure or risk was not prevented. It focuses on the effectiveness of existing safeguards\u2014called \u201cbarriers\u201d\u2014designed to stop undesired outcomes. This tool is especially helpful in Internal Audit and Project Management when reviewing incidents, non-conformances, or risk exposure. It [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1051,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[17,12],"tags":[],"class_list":["post-715","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internal-audit","category-project-management"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/e.americanpro.org\/wp-content\/uploads\/2019\/11\/60-e1750017307907.avif","_links":{"self":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts\/715","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=715"}],"version-history":[{"count":1,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts\/715\/revisions"}],"predecessor-version":[{"id":1260,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/posts\/715\/revisions\/1260"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=\/wp\/v2\/media\/1051"}],"wp:attachment":[{"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=715"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=715"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e.americanpro.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=715"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}