屏障管理,概念起源自”起司理論”,最早由殼牌(Shell)公司所提倡並以領結圖模型(Bowtie Model)實踐。而在2010年英國BP石油墨西哥灣的漏油事故,造成11人死亡、超過200億美元經濟損失後,影響了整個能源行業對安全管理的路線重新思考。尤其以挪威石油安全局為屏障管理的積極倡導者,逐漸地演變為歐盟的安全狀態報告(Safety Case)將領結分析列為重大事故危害(MAH)分析的主要方法、英國鐵路與公路辦公室(UK ORR)推薦使用CGE Risk公司(已於2020年1月併入Enablon公司)發展的Bowtie軟體協助建立軌道業的風險管理模型、航太業使用Bowtie建立風險管理模型、基礎重要設施以Bowtie建立資安威脅模型,領結分析已成為國際風險管理的主流方法。屏障管理強調動態屏障管理結合企業其他管理系統的實踐,因IIoT及大數據甚至AI的技術應用,間接加速了風險管理數位化的發展與應用。本文將由風險管理的國際趨勢發展、以屏障管理結合其他管理系統及如何實施動態屏障管理做一完整的實踐論述,期望對於台灣能源業界的風險管理數位化有引領的作用。
Barrier management, a concept originated from the Swiss Cheese Model, was first advocated by Shell and put into practice by the Bowtie Model. After the Deepwater Horizon oil spill in the Gulf of Mexico in 2010, which caused 11 deaths and over $20 billion in economic losses, the entire energy industry was influenced to rethink the road map of safety management. In particular, the Petroleum Safety Authority Norway is an active advocate of barrier management, which has gradually evolved into the EU's Safety Case, which suggest Bowtie analysis as the primary method for major accident hazard (MAH) analysis. The UK Office of Rail and Road (UK ORR), which also recommends using CGE Risk's (merged into Enablon in January 2020) developed BowtieXP to help build risk management models for the rail industry. The aerospace industry uses Bowtie to build risk management models, and infrastructure uses Bowtie to build information security threat models. Barrier management emphasizes the practice of dynamic barrier management combined with other management systems of enterprises, and the application of IIoT and big data or even AI technology has indirectly accelerated the development and application of digitalized risk management. In this paper, we will discuss the international trend of risk management, the integration of barrier management with other management systems, and how to implement dynamic barrier management to guide the digitalization of risk management in the energy industry in Taiwan.