Home▸Articles▸Physics & Mechanics

Swiss Cheese Safety Barriers: Understanding Layered Defense Mechanisms

A model based on the Swiss cheese metaphor for understanding how multiple layers of defense can prevent accidents in complex systems.

mysimulator teamUpdated June 2026≈ 3 min read▶ Open the simulation

What Are Safety Barriers?

Safety barriers are layers of protection designed to prevent accidents or mitigate their impact. In complex systems, such as nuclear power plants or aviation, a single layer may not be sufficient to ensure safety.

The Swiss cheese model, developed by James Reason, uses the analogy of multiple slices of Swiss cheese stacked together, where each slice represents a barrier and its gaps represent weaknesses in that barrier.

How Does the Model Work?

In this 2D defence-in-depth model, hazards are represented as random events that can pass through layers of safety barriers. Each layer has gaps or vulnerabilities that can be patched or moved to reduce the risk of a breach.

The model uses Monte Carlo simulations to calculate the probability of a hazard passing through all layers and causing an incident, providing insights into how different factors affect overall system safety.

live demo · related simulation● LIVE

Key Factors in the Model

The number of layers, gaps per layer, gap size, erosion rate, and safety effort are critical parameters that influence the model's outcomes. These factors represent various aspects of real-world safety measures and their effectiveness.

Gap drift refers to the movement of gaps over time, which can either increase or decrease the risk of a breach depending on whether new vulnerabilities are created or existing ones are closed.

Why Does This Model Matter?

Understanding how multiple layers of defense work together is crucial for designing and maintaining safe systems in various industries. By visualizing the model, one can see the importance of continuous monitoring and improvement of safety measures.

The incident-rate graph helps in quantifying the risk reduction achieved by different configurations of safety barriers, providing a practical tool for decision-making in safety management.

Frequently asked questions

What is the Swiss cheese model used for?

The Swiss cheese model is used to illustrate how multiple layers of defense can fail simultaneously, leading to accidents. It helps in understanding the importance of redundancy and continuous improvement in safety systems.

How does erosion rate affect the model's outcomes?

Erosion rate represents the degradation or wear of safety barriers over time. A higher erosion rate increases the likelihood of gaps appearing, thus raising the risk of a breach through all layers.

Can you explain gap drift in more detail?

Gap drift refers to the movement of existing gaps within a layer of defense. This can either increase or decrease the overall safety by creating new vulnerabilities or closing existing ones, respectively.

How does patching and moving gaps impact the model's results?

Patching and moving gaps directly affect the probability of a hazard passing through all layers. Patching closes existing gaps, reducing risk, while moving gaps can either create new vulnerabilities or close them, depending on their new positions.

Try it live

Everything above runs in your browser — open Swiss Cheese Safety Barriers: 2D Defence-in-Depth Model and change the parameters while it is running. Nothing is installed, nothing is uploaded, the whole model lives in one tab.

▶ Open Swiss Cheese Safety Barriers: 2D Defence-in-Depth Model simulation

What did you find?

Add reproduction steps (optional)