Skip to content
View in the app

A better way to browse. Learn more.

Benchmark Six Sigma Forum

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Message added by Mayank Gupta,

Swiss Cheese Model suggests that major failures occur not due to a single breakdown, but due to the alignment of multiple small weaknesses across different layers of defense. Its most common usage is in Healthcare (patient safety), Aviation (accident prevention), Manufacturing and quality control, IT and cybersecurity (frauds).

 

An application-oriented question on the topic along with responses can be seen below. The best answer was provided by Akkul Dhand on 18 July 2025.

 

Applause for all the respondents - Sumukha Nagaraja, Sohan Subhash Mirajkar, Najmuddoja Muhammad, Smith Roy, Akkul Dhand, Pravin Gadade, Airat Aroyewun, Dharanesh Mysore, Ehisuoria Aigbogun, Thaiyeb Hussain, Vatsala Muthukumaraswamy, Jess Balmaceda, Rohan Modak, Sachin Sharma, Jayaraj J, Sargun Diwan, Yuvaraj Krishnan, Sohil Changan, R Rajesh, Debanjana Basu.

Featured Replies

Q 787. Think about the process you are involved with. How can the Swiss Cheese Model help you identify risks and strengthen the reliability of that process? What would represent the “slices of cheese” (defense layers) and the “holes” (potential weaknesses) in your process? How can this understanding guide improvement efforts using Business Excellence principles?

 

Note for website visitors -

Solved by Akkul Dhand

The Swiss Cheese Model is a great way to figure out how mistakes and failures happen in systems that are hard to understand. If we think of a process as a series of layered defenses, we can find the holes (weaknesses) that let failures go through the system without being stopped. There are holes in each layer (or "slice of cheese").

 

How to Use the Swiss Cheese Model in Your Work
1. Getting the cheese slices (the layers of defense)

  • These could be parts of any structured process, such as a data pipeline, an investment study, or the life cycle of a product.
  • Standard Operating Procedures (SOPs) are written rules and steps that show you how to do things.
  • Training and Competence: How much the workers know and how good they are at their jobs.
  • Automated Checks or Validations: Scripts, dashboards, or algorithms that look for strange behavior or things that don't fit in.
  • Peer evaluations or Sign-Offs: These are times when teams can check on quality, evaluations, or approval.
  • The platforms that are used to manage data or tasks are called tools or systems for technology.
  • Audit and Compliance Processes: Regular checks, both inside and outside the business.
  • Each of these layers helps stop mistakes from getting worse.

2. Knowing the Weak Points (Holes) in Each Layer

  • There are always gaps in defenses; none are perfect.
  • People make mistakes when they don't know something, are tired, or don't know enough.
  • There isn't enough documentation because the SOPs are either old or not finished.
  • Technical Issues: Software bugs, issues with integration, or limits on automation.
  • Process Gaps: things that need to be done but aren't, or duties that aren't clear.
  • Being too trusting of tools or being too sure that they would find all the problems without checking them by hand.
  • The holes are all different sizes and not in the same place. When they line up across layers, a failure happens because it lets a threat through every barrier.

Using the Principles of Business Excellence to Make Things Better Business Excellence (BE) frameworks like EFQM or Baldrige can help the Swiss Cheese Model analysis by making things better all the time and focusing more on systemic thinking.

  • Taking processes into account and lowering risks
    • Make a map that shows the whole process from start to finish. You can see all the steps and where the layers of defense are.
    • Find out why there are gaps and how to fix them by doing a root cause analysis. You can use tools like 5 Whys or Fishbone Diagrams to do this.
    • Be smart about using redundancies: don't add backup checks or verifications everywhere; only do so where the risk is highest.
  • Learning and giving feedback in cycles
    • KPI dashboards and event logs can help you find new threats.
    • Make it a habit for everyone on the team to talk about what went wrong and what they learned from it.
    • Getting better at things
    • Pay for regular training, courses that cross departments, and ways for people to share what they know to make up for mistakes or gaps in knowledge.
  • Always improving
    • You can make each layer stronger and lower the risk of failure in a planned way by using PDCA (Plan-Do-Check-Act) or DMAIC (Define-Measure-Analyze-Improve-Control).

Example from real life
If your method involves making fake money,

Some parts could be automatic data imports, checking models, internal audits, and getting leaders' permission.

Some holes could be old data sources, assumptions that weren't tested, or approvals that were given too quickly.

You could:

Check your validation scripts more often,

Tell workers about the dangers of using newer models,

Make a dashboard that shows how your model is doing at the moment.

 

Final Words
People use the Swiss Cheese Model to find risks and make systems better by thinking about layers and holes. When used with Business Excellence, it changes the focus from blame to resilience, which makes any process more stable and effective over time.

How the Swiss Cheese Model Helps

The Swiss Cheese Model helps me spot where things can go wrong and understand how multiple safeguards can still fail if their weaknesses line up.

Imagine each layer of protection in a process as a slice of Swiss cheese. The slices (defenses) try to block mistakes or failures, but each has some holes (weaknesses). If the holes in several layers line up, a problem can slip through all defenses and cause a failure — like a system crash, data leak, or customer impact.


In My Work:

Slices of Cheese (Defense Layers)

These are the safeguards I put in place:

  • Code reviews – to catch errors early.

  • Testing (unit, system, integration) – to find bugs.

  • Monitoring tools – to detect issues in real-time.

  • User feedback loops – to improve the system over time.

  • Documentation and SOPs – to guide teams.

Holes (Weaknesses)

These are the risks or gaps in those defenses:

  • Rushed code reviews – can miss subtle bugs.

  • Tests may not cover all edge cases – letting bugs through.

  • Monitoring can be misconfigured – failing to alert us.

  • Users might not report issues clearly – delaying fixes.

  • Outdated documentation – can lead to confusion.

Swiss Cheese Model

Every complex system has weaknesses and vulnerabilities that can lead to its failure. A complex system has multiple layers of defense, and weaknesses or failures can occur if those weaknesses or holes align and allow hazardous materials to pass through. This concept of multiple defense layers and holes is widely known as the Swiss Cheese Model.

"Slices of Cheese" is called the Defense layer

Holes in cheese are called vulnerabilities.

Application of the Swiss Cheese Model to My Project

In my current Digital Transformation initiative, I lead the Cloud Migration process from on-prem to Cloud

Slices of Cheese or Defense Layers

-  Solution Design Reviews

    o   The Architecture Review Board (ARB), in collaboration with Security Champions, evaluates architectural designs to           ensure they meet compliance standards while remaining scalable, resilient, and secure.

-  SRE Reviews

    o   The Site Reliability team, with a strong focus on Reliability, observability, and operational efficiency, reviews cloud architecture.

-   CI/CD Pipelines

    o   Automating development, testing, deployment, and validation using IAC (Infrastructure as code) to ensure consistency.

-   Segregation

    o   Segregation of data across environments

-   Change Management and Approval Process

    o   Stakeholders should approve the implementation of any change. Every change to production should have a Change Control approved ticket.

-   UAT (User Acceptance Testing).

   o   Business users should test every significant change to validate functionality against real-world workflows.

-   Certificate management

   o   An automated system should manage the certificate during the migration from on-premises to the Cloud.

-   Monitoring & Observability Tools

   o   Using tools to monitor real-time metrics, logs, and alerts to catch any anomalies early

-   Business Continuity

   o   Implement DR strategies to ensure business continuity.

-   Documentation

   o   Create documentation of workflows, best practices, etc

-   Post-Deployment Reviews & Feedback Loops

   o   The team continuously captures insights in a shared knowledge base, fostering an environment where Architects and engineers engage in ongoing training and learning.

-    Segregation

   o   Segregation of data across environments

 

Holes in Cheese or Weaknesses (Vulnerabilities)

-  Design Reviews

     o   Business requirements Misalignment may lead to the omission of edge cases.

- Roles

     o   Teams often neglect to enforce the least privilege access, increasing the risk of unnecessary exposure and security vulnerabilities.

- Gaps in Automation

     o   Not version control, outdated scripts, and environmental variables not correctly set up

- Approvals Slips

     o   Change management rubber-stamping without fully understanding the change or without complete risk analysis

- Monitoring

     o   Teams frequently misconfigure alerts or apply inappropriate threshold settings, leading to ineffective monitoring of critical processes.

- Post-Deployment

     o   Lack of motivation in the lesson learned.

- Audit

     o   The team rarely reviews audit trails.

 

Using Business Excellence to Strengthen Reliability.

Using DMAIC, we can strengthen reliability.

-  Define

         o   Align the project's goals with strategic priorities, identify stakeholders who will be impacted by the project, and define roles and responsibilities using a RACI framework.

-  Measure

         o   Identify knowledge gaps and tailor training to meet the needs of individual staff members through targeted feedback. Involvement of cross-functional and all stakeholders

-  Analyze

         o   Lead the actionable task through workshops, build a pilot, and let stakeholders stress-test and make improvements on small tasks. Additionally, educate stakeholders on how to navigate difficult conversations.

-  Improve

        o   Encourage full participation in training and simulation exercises to enhance team preparedness and reinforce best security practices. Guide pilot efforts and build team capability through iterative learning.

-  Control

        o   Embed changes to documents. Strong emphasis on conformance audit & compliance checks and strategic direction, or a roadmap of what to monitor, how to monitor, and how often. Who is responsible? Also includes plans in case metrics exceed targets. A personalized and focused approach to skills development drives continuous growth and improvement.

Summary

Examining the cloud migration process through the lens of the Swiss Cheese Model enables us to mitigate risks proactively. DMAIC tools help close holes, vulnerabilities, and weaknesses and align slices.

  • Enhance automation to flag DPI violations more accurately

  • Train designers to validate DPI independently of software flags

  • Introduce an additional pre‑print verification layer

  • Refine procedures and learn from customer feedback looping back into the system

 

Together, these actions embody the core of excellence layering defenses smartly, reducing system failures, learning from every incident, and elevating robustness at every stage. This ensures that even when one layer has a problem, others remain intact—and organizational failures become preventive rather than fragile.

  • Solution

The Swiss Cheese model is a risk analysis and management model developed by James Reason.
 

The model illustrates how accidents or failures can occur due to a combination of various factors. Think of a stack of Swiss cheese slices with the slices representing layers of defence, such as safety procedures, training or system design within a process or an organisation, and the holes representing the potential weaknesses or failure points in those defences such as human errors, system malfunction or a procedural flaw. In isolation, the holes may not create an issue; however, when they line up, they create a clear path for failure.
 

Used in various industries such as healthcare, aviation, engineering, etc., the model helps

1.       Analyse past accidents and identify areas for improvement.

2.       Spot individual failures as well as systemic vulnerabilities

3.       Understand that a single safeguard is never enough

4.       Focus not only on adding additional layers, but also improving the quality of the existing ones (i.e. shrinking the holes)
 

In my organizational processes, the cheese slices or the layers of defense are,

1.       Process Documentation - Standard Operating Procedures for clarity on what needs to be done and how.

2.       Technology and Tools - CRM, project trackers, automated reporting.

3.       People Structures – Skilled team members and role clarity.

4.       Audits & Reviews -Regular Check-ins, internal audits and client feedback loops

5.       Training & Capability Building - Internal or external training programs, onboarding procedures, or process trainings.

6.       Governance Frameworks - Approval systems, decision rights or escalation ladders
 

And the holes i.e. the weak spots are,
 

1.       Process Documentation: Outdated or poorly communicated procedures

2.       Technology & Tools: Incorrectly implemented or data not updated

3.       People: Poor Delegation, lack of ownership or unclear roles

4.       Training: Theoretical but no practical implementation, old training systems or irrelevant modules

5.       Governance -  Micromanagement, or too much red tape, or unclear escalation

If the holes line up, there can be client delivery issues, missed deadlines, and miscommunication, leading to business losses.

 

However, by using Business Excellence principles, pitfalls can be avoided, as below,

1.       Map your defences – Document all the defence mechanisms in the workflows by assessing where you rely on people, where on technology and where the decision-making is slow.

2.       Identify and Prioritize risks – Run a FMEA analysis to spot where the holes might align, which layers are the weakest and which ones overlap.

3.       Close the gaps – Use the PDCA, DMAIC to tighten each layer (shrinking the holes) such as,

·        Improve SOPs - standardise, train, test understanding, periodic reviews

·        Review CRM or reporting dashboards for data accuracy

·        Audit the impact of training, not just attendance

4.       Design for resilience – Set up redundancy where needed by implementing backup approvers, escalation triggers, or multiple checkpoints so that even if one layer fails, another catches it.

5.       Imbibe a culture of prevention – Encouraging teams to look beyond firefighting and ask what hole in our process allowed this to happen, and how can we patch the holes?


For Eg: During any transition,

·        One layer is the communication plan.

·        Another is the handover process

·        Third is the data access and permissions

·        And fourth is internal task tracking

If the comms aren’t clear or the handover isn’t fully documented or someone forgets to update access – that’s a failure chain.

 

Final thoughts

The Swiss Cheese model helps us see failure as a whole system and not just someone’s screw up. When combined with Business Excellence tools, you not only patch holes but build stronger and smarter slices.

My organization is facing challenges in managing Accounts Payable process. There are instances where we ended up missing out on renewal of contracts, invoice booking, late payments to vendors,  data entry errors, manual email tracking, etc. They have direct impact on our business and poor experience to maintain vendor relationship. We are looking or cost effective AI tool that can help us to reduce these errors and bring efficiency.

 

Application of Swiss Cheese Model:

 

Slices of Cheese (Defense Layers):

 

  1. Contract Controls: Make sure contract are active with defined term, scope and payment terms.
  2. Invoice Receipt, 3 way match and data entry in ERP: Ensure all invoices received are considered, matched and booked. Update invoice details in log.
  3. Approval Flow: Ensure all invoices are approved by the respective department head and establish standard follow up / escalation mechanism.
  4. Payment Processing: Paying in batches with approvals from the respective heads from the treasury.
  5. Vendor Reconciliation: Perform vendor reconciliations by assigning risk levels to the vendor in high, low and medium by assigning frequency of the reconciliation.

 

Holes in the Cheese (Potential Weaknesses):

 

  1. Manual Group Email Management: Oversight to read email, deletion, erroneously marking an email as completed.
  2. Data Entry: Incorrect vendor name, amount, payment date, service descriptions, account number, double invoice processing.
  3. Approvals: Lack of timely approvals from the department heads.
  4. Unclear responsibility: Assumptions / miscommunication between procurement team and invoice processing team and approvers.
  5. Visibility: Lack of periodic dashboards for management review.

 

Process Excellence: We are planning to introduce AI solutions to minimize manual efforts, bring efficiency and improve vendor experience.

 

Solution: Email Parsing and Classification with Power Automate + AI Builder.

 

Phase 1: Develop solution and BRD approval from the management

Phase 2: Perform trial with limited emails and corrections

Phase 3: Train operations team

Phase 4: Implement

Phase 5: Governance

In a process of Supporting inventory visibility and stock accuracy in a manufacturing environment. Using the Swiss Cheese model, I can see that no single control is perfect because risks can still pass through weaknesses in multiple line ups.

 

Below are examples of Defense Layers in this processes: 

  1. Real-time stock tracking system
  2. Physical stock counts by warehouse staffs
  3. Approval workflow for material requests before the start of a process and during the process.
  4. Audit checking by the inventory control team of the company.

Weaknesses(Holes in the Cheese): 

  1. Data entry errors or delays in updating the digital log
  2. Incomplete or rushed physical counts during busy periods
  3. Bypassing approval dur to urgency or familarity
  4. Audits being skipped due to manpower shortages.

Below decribes how this guides Business Excellence Improvements:

Using the Swiss Cheese Model, I can apply Business Excellence principles like the Poka-Yoke (error-proofing), Standard work, and Root Cause Analysis to plug those holes.
For example:

  1. the Automation of reminders for stock count deadlines
  2. Rotation of Audit responsibility among staffs to ensure it gets done consistently
  3. the Introduction of barcode scanning to reduce entry errors.

This thinking will shift the mindset from fixing the one big issue to Strengthening the system as a whole.

The Swiss Cheese Model serves a purpose when it comes to visualizing how risks intersect with multiple processes in a system's defenses. In the scope of my process, let’s consider the HR onboarding process for illustration; it shows how multiple gaps—often thought of individually—at different stages can lead to a larger systemic failure if not remediated.

 

Let’s consider this situation, ‘slices of cheese’ denotes to layers of security or defense within the onboarding processes which include:  Pre-employment verification, Onboarding systems with automation features, Overview of HR policies, Configuration of IT systems for new employees and Review by managers and feedback systems 

 

Each layer contains some potential problems, gaps, or ‘holes’ as we may say. A few generalized ones are: Background verification holdups, Errors occurring on documents generated by the system and Communication of policies that are vague or too broad 

 

For example, lacking guidance from managers coupled with missing steps in hardware provisioning. 

When gaps are lined up in these holes, a pathway is created to error such as a new hire who starts without sufficient tools, lacks role clarity about their functions, and holds unclear ideas regarding the benefits processes. 

 

Grasping this form of risk alignment facilitates using strategies such as rigorous process mapping, continuous improvement practices (Kaizen), and root cause analysis to improve any gaps. Gaps can be narrowed by predicting where the most issues will arise, addressing them in a methodical manner, shoring up controls, or bolstering existing ones, improving process dependability and the employee experience simultaneously.

 

This posture actively encourages proactivity. Instead of responding to issues, we seek to understand how problems can arise and take measures to eliminate those possibilities, achieving greater improvement in both service delivery and quality.

Slices of Cheese (Defense Layers) in My Standardizing and Automating Server Configuration Database

 

  1. Standardized Development Protocols
    Clearly defined attributes and terminology leads to standard and consistent communication path between tools and reduces attribute conflict during automation frameworks. This will serve as the first line of defense. They ensure consistency and minimize ad hoc implementations that could introduce variability or error. An example in my current project is ensuring platform names are consistent across multiple teams.
  2. Validating the data

My current project is ensuring no missing attribute or required data before moving to publish data in production site for engineering utilization.

  1. Governance and Documentation Standards
    I have gone ahead to implement governing policy to ensure the right person gets the right level of access needed. This will align with Dell’s internal policies governing data usage and tool integration offering structure and compliance, particularly around ethical AI concerns.

Holes (Weaknesses) in the Process

  • Inconsistent Adoption of Standards
    Not all teams may apply standardized practices equally, especially across business units, leading to process fragmentation.
  • Poor Change Management Process
    Introducing automation without proper training of stakeholders or alignment with stakeholders may result in improper use or resistance.

 

Guiding Improvement with Business Excellence Principles

 

  • Continuous Improvement: Regularly reviewing and refining automation processes, ensuring lessons learned are systematically captured and reused.
  • Customer Focus: Ensure to standardize and design the tools by engaging all stakeholders to ensure we have the right set of information and alignment at every stage of the project.
  • Process Integration: Use Lean Six Sigma tools to identify bottleneck in the process and variability in our automation lifecycle. Lastly, eliminating human/manual data entry into configuration tool.
  • Cultural Alignment: Fostering a culture of quality and accountability where teams embrace standardization and automated process.

 

When I look at how things can go wrong in our process, the Swiss Cheese Model actually paints a clear picture. Even when you have got all the right checks in place, mistakes still manage to happen. That’s because it is not just one thing failing, it is usually several small gaps that all line up.

 

Layers of Defense:

For us, the layers of defense are things like SOPs, training programs, tool validations, QA checks, and so on. They are solid on paper, but in real-time operations, none of them are perfect. And they don’t always catch everything.

  • SOP: It can go outdated if no one is keeping them up to date.
  • Training: Training is given, but sometimes people don't get enough hands-on time with the tools, like the decision tree.
  • QA Review: QA reviews are there, but if the sampling isn't representative, the biggest risks can be missed.

I have also seen cases where a payers update came in, but our system or team didn’t catch up fast enough. It creates a real gap.

 

Holes:

So the “holes” are these small flaws, and if they happen to align, that is when an issue gets through. What helped me is shifting focus from individual errors to looking at the process as a whole, it makes me to ask, where did the system allow this?

 

Business Excellence point of view:

This model fits well with the tools we already use. For example,

  • FMEA helps flag the areas where a failure is likely.
  • SIPOC diagrams help me map where each control sits. And when something does go wrong
  • I usually dig into it using the 5 Whys or fishbone just to see which layer didn’t do its job.

When I am using DMAIC, this model naturally blends in. I first look at where the most vulnerable is. Then I check how often issues are slipping through. In the Analyze phase, I focus more on connections between gaps than on a single root cause. During Improve, it is usually about tightening up the controls; maybe refreshing training, rewriting an SOP, or adding a validation. Control, to me, is more about ongoing monitoring to make sure things dont drift back.

 

What I like about this model is that it reminds me that it is not about blaming people. It is about designing a system that is strong enough to catch mistakes before they become problems.

In Swiss cheese model, the slices of cheese symbolize the defense layers such as processes, systems, and training which aim at preventing the errors. Holes in the cheese signify gaps in the defenses such as human errors, communication gaps and system constraints.

 

Slices of Cheese (Defense Layers)

Provider clinical documentation

Defense: Educating the providers on best practices for documentation

 

Software Encoder

The tool that facilitates the assignment of appropriate codes

Defense: Applying strong Poka Yoke technique in software encoder which prevents common errors from occurring

 

Holes in the Cheese (Weaknesses)
Poor Provider Clinical Documentation 

Missing specificity or type or acuity of diagnosis

 

Not Hard Poka Yoke Control method in coding encoder
Warning which is a soft Poka Yoke method in encoder that allows coders to accept unspecified and specified type of same diagnosis, and symptoms with definitive diagnosis

 

How to use Business Excellence to Strengthen the System
DMAIC Framework Example:
Define
Problem: High percentage of missed MCC/CCs which impact DRG reimbursement
Goal: To Improve CC/MCC capture rate and reduce the rebill


Measure
The Baseline CC/MCC capture rate

 

Analyze
Find out which layers have the largest or most aligned "holes."
For example -  80% of missed CCs linked to specific provider units


Improve
Strengthen defense layers:
Implementing targeted provider education

Incorporate first time right checklist within encoders

 

Control

Mistake-proofing: Introduce a "Swiss Cheese Risk Checklist" for coders

 

Summary

The Swiss Cheese Model assists inpatient coding teams in visualizing the interrelated risks and identify where defensive layers can be implemented or strengthened. By integrating it with Business Excellence tools such as DMAIC, KPIs, Voice of Employee, and Lean, we can transform from reactive correction to proactive prevention.

 

 

THE DEFENSE LAYER

 

Screening operation is an integral part of KYC’s end-to-end value chain. It is consisting of four lines of defense. The First Line-of-Defense (1LoD) comprised of screening investigator professionals who facilitates the name screening, transaction screening, and adverse media screening. They follow stringent rule-based approach to distinguish clean alerts from false-positives, unable-to-eliminate (UTE), and true hits.

 

The Second Line-of-Defense (2LoD) is the Money Laundering Reporting Officer (MLRO). These are money laundering experts following risk-based approach of decision-making and address escalations from 1LoD like UTE and true hits.

 

The Third Line-of-defense (3LoD) is the Quality Assurance (QA). These are group of subject matter experts (SME) who strategically facilitates sampling check of all screening alerts. Despite only doing sampling, these group of SMEs are still able to detect gaps from both 1LoD and 2LoD.

 

The Fourth and last Line-of-Defense is CAS Audit. CAS Auditors facilitates periodic process and systems audit to ensure that all procedures, policies, regulatory requirements, and commitment to regulators were uphold and complied.

 

LAYERS OF DEFENSE POTENTIAL WEAKNESS

 

The 1LoD inherent risk can be attributed to its investigator’s level of competency and razor-sharp focus. Undetected true hits and UTE is risky and compromises banks’ KYC objectives and potentially cause integrity issue in the eyes of the clients and regulators alike.

 

Both 2LoD and QA process poses a risk of wrong or misled decision-making due to marginality of the case.

 

Breach within KYC system is very costly through regulatory penalties and compromises banks’ integrity as a whole.

 

IMPROVEMENT BASED ON BUSINESS EXCELLENCE

 

Rigorous training is provided to the first three layers of defense, and they must pass all examinations before going-live in operations, MLRO, and QA alike. They maintain a common repository of all procedures and policies in a Confluence page.

 

Regular alignment call (i.e. Bi-weekly, monthly, etc.) were facilitated by MLRO and QA in different occasions to discuss quality and process related topics. In this forum, root-cause analysis (RCA) and corrective actions were tackled to prevent potential misses, go into best practice discussion, and promote continuous improvement.

 

Future Reality Tree can also be a good introductory tool to use to improve the Screening end-to-end process. A good AI solution is a future-tilt breakthrough to mistake proof the entire value chain.

 

Examples of different slices of cheese meaning different defence layers (checkpoints, controls) include member eligibility verification, claims intake checks, auto adjudication rules engine, QC checks

 

Holes in system include- outdated feed form leads to incorrect member eligibility status, OCR incorrectly read intake scanned forms , outdated policy logic in auto adjudication rules in engine, incorrect sampling in audits

 

By visualizing healthcare claims processing workflow through the Swiss Cheese Model, we can gain clarity on:

  • Where the defences exist,
  • Where they are weak,
  • And how errors escape intense scrutiny of reviewers

Integrating Business Excellence principles ensures those “holes” are proactively identified and closed, creating a more reliable, efficient, and error-proof claims process.

Answer: The Swiss cheese model is the powerful tools used to identify the risk and improving the reliability of the process. This model is useful for complex systems like engineering, aviation, healthcare and even in pharmaceutical sector. Swiss Cheese Model helps to identify the risks through following approaches:

Ø  Detecting weak points: This approach emphasizes the identification of areas where the system is most susceptible to failure or attack or can say that the area’s where multiple small issues could combine into a major failure.

Ø  Highlights hidden Conditions: This approach helps distinguish between human errors and underlying  systemic issues, which further helping teams to identify and address the root causes

Ø  Support proactive risk management: This approach analyze, where the hole might align. Through this approach organizations can proactively strengthen weak areas to prevent failures before they occur.

Swiss Cheese Model helps to strengthen the reliability of that process through following approaches:

Ø  This model helps for implementation of backup systems and verification of the checks to enhance the reliability and prevent potential failures.

Ø  This model also helps through process improvement approach. It helps identify opportunities to stringent the process or introducing automation in order to enhance efficiency and minimize the risk of error.

Ø  Through monitoring and feedback, this model promotes continuous monitoring to detect and patch new holes as they appears.

We have recently completed out project to shift .manual documentation into eLogbooks and eBatch Record System. Followings are the slice of the cheese:

Ø  Standard Operating procedure:  Implementation of a new procedure ensures consistency and robustness, and same will helping teams to execute task reliably and efficiently.

Ø  Employee Training Program: This approach helps employees stay informed and up-to-date with newly implemented procedures, which ensures smoother adoption of procedure and consistent execution.

Ø  Validation: This approach ensure consistency in process and also ensure that the new process will remain in a state of control of validation in future.

Ø  Apart from aforementioned approaches, Automations check, QA review, employee feedback loops and regular audit for compliance are the remaining slice of the cheese.

Following were the holes:

Ø  Outdated or manual procedure: Manual entry in the system is a time consuming process that often require number of manual check as a result increase the chances of error.

Ø  Inadequate training: Employees are trained across all shifts; however, manual procedures sometimes lead to errors. By implementing a new system-based procedure, online training becomes mandatory before an employee can access the workplace. The system restricts access until the training is successfully completed, ensuring readiness and reducing the likelihood of mistakes.

Ø  Lack of real-time monitoring in manual procedures often leads to backdated entries, which can result in non-compliance issues and even 483 observations during audits. The implementation of the new system prevents users from proceeding without completing prior tasks, ensuring compliance and audit readiness.

Ø  Apart from aforementioned approaches, ignorance of feedback and audit findings, over reliance of the manual procedure, communication gap between team members are the remaining holes of the cheese.

Business excellence framework ensure continuous improvement, stakeholder alignment and focus and process optimization:

Ø  Business excellence framework ensure proactively risk identification

Ø  This approach (Business excellence framework) fosters a culture of quality and safety. Additionally, also helping to prioritize that which layers require additional attention and reinforcement.

Ø  BE framework also align risk mitigation with strategic goals.

Ø  It also help,  regularly reviewing and strengthening each layer of defense and minimize vulnerabilities and enhances overall system resilience.

Ø  Monitor performance to ensure defense are effective and risk are minimize.

Ø  Use feedback and incident analysis to patch holes and add new layers.  

 

As part of Continuous Improvement team and integrating Swiss Cheese Model into Continuous Improvement assists in visualizing how defense layers will work together in preventing failures even if the layers had flaws individually.

 

It is all about creating a resilient system and not isolated quality checks where individual weaknesses cause the issues.

 

The Slices of Cheese and the Holes represent various factors which strengthen the overall process:

 

Slices of Cheese (Defense Layers):

·         Six Sigma / Lean practices;

·         SOPs (Standard Operating Procedures)

·         Gemba Walks

·         Poka-Yoke

·         Visual Management

·         KPIs

·         Qualitative Feedbacks

·         Continuous Learning

·         Training & Upskilling

 

Holes (Potential weaknesses):

·         Improper application of methodologies or lack of buy-in from all stakeholders

·         Outdated documents in workplace or no proper accessibility of documents

·         Very high level observations missing the actual problems

·         Outdated processes or easy to skip the steps

·         No proper visibility of actual progress

·         Metrics are not aligned with strategic goals

·         Feedback responses are minimal

·         Lessons learnt are not converted into actions

·         Skill gaps observed due to more generic sessions

 

Example: Process Standardization & SOP updates

 

Slices of Cheese (Defense Layers)

Holes (Potential weaknesses)

SOP Review measure

Not updated regularly. Updated only if issue occurs

Training on SOPs

No active participation or improper knowledge transfer

Audit mechanism

Focusing only on compliance of stated requirements, but missing to check any potential gaps in the system

 

Business Excellence reinforces systemic, data driven and people centric approach.

·         Leader’s involvement to visibly support the Continuous improvement practices makes all levels more robust.

·         Integrate processes to align SOP’s & KPIs

·         Improve feedback response rate & bring the customer feedback into regular reviews.

·         Promote best-in class solutions through Benchmarking

·         Promote a cultural change to stop & fix wherever required.

The Swiss Cheese model initially developed for risk management and safety, is a powerful tool for understanding how multiple layers of defense symbolized by “slices of cheese” can prevent errors or points of failure represented by “holes” in complex systems or processes. When holes across multiple layers align failures can occur.

Having been a part of contact centers, inside sales and customer support teams and applying the SCM has allowed stakeholders such as myself to identify vulnerabilities and guide improvement efforts using Business excellence principles.

Below, I shall outline the most relevant use cases of the SCM in the sales process, providing examples of the defense layers (“slices of cheese”) and potential weaknesses (“holes”) and also how this understanding has allowed to drive process improvements.

Swiss Cheese Model in Sales Processes

In a sales process, the SCM helps visualize multiple layers i.e. the members / teams / systems that work together to ensure successful customer acquisition. Each layer aims to prevent errors, however weaknesses can still exist.

Let’s break down the Sales process to identify the "Slices of Cheese" - Defense Layers and the "Holes" - Potential Weaknesses to better understand the SCM.

Step 1 - Lead Generation and Qualification

-          Layer’s Purpose - Reaching out to and qualifying potential customers.

-          Holes - Poor lead quality, inadequate qualification criteria, ineffective lead scoring.

-          Scenario - Vaguely defined target audience might result in unqualified leads being passed to sales agents, wasting time and resources.

Step 2 - Sales Training and Scripts

-          Layer’s Purpose – Equip the sales teams with the necessary tools and knowledge.

-          Holes - Outdated scripts, insufficient training, lack of product knowledge.

-          Scenario – Agents using outdated scripts or non-updated KB’s may end up providing incorrect information, leading to customer mistrust and lost sales.

Step 3 - Customer Interaction and Engagement

-          Layer’s Purpose - Building customer rapport and effectively communicate value proposition.

-          Holes - Poor communication skills, unable to handle customer objections, failure to build rapport.

-          Scenario - An agent unable address customer concerns might fail to convert a qualified lead into a sale.

Step 4 - Follow-up and Closure

-          Layer’s Purpose – Maintain follow ups to secure the sale and ensure customer engagement.

-          Holes - Ineffective closure techniques, lack of persistence, poor follow-up tracking processes.

-          Scenario – Non-compliance to follow up on a prospective / potential lead may result in the customer choosing a competitor.

 

SCM guiding improvement efforts using Business Excellence principles

The efforts to minimize and eliminate errors and potential failures would be directed towards -

  • Identifying Weaknesses – By using process mapping and RCA (e.g., Fishbone Diagram) to pinpoint holes in each layer.
  • Prioritizing Improvements - Applying tools like FMEA to prioritize high-impact weaknesses, such as inadequate lead qualification.
  • Implementing Controls - Using LSS DMAIC methodology to address holes, e.g. refine the lead qualification criteria basis data analysis and monitor its impact.
  • Monitor and Measure - Tracking KPIs such as Conversion% and leads quality to ensure improvements are effective.
  • Improvement continuity - Regularly updating sales scripts and training programs based on VOC and market trends.

 

 

In my view The Swiss Cheese Model Frame work will be a perfect ally for companies pursuing Business Excellence.

In today’s dynamically changing world, business focuses beyond usual cost reduction Programs or marketing strategies, instead they have started to transform digitally, creating rich user experience on using the goods and services.

Companies pursuing business excellence have started to focus more on digital transformation not only on processes, products or services but the very design of itself  

They make use of the technological advancement and leverage them for more versatile, sustainable, scalable business models. This can only be achieved with a continuous improvement culture and the leaderships focus and drive on it, which is the fundamental fabric of business excellence.

This is where the Swiss Cheese model framework plays a pivotal role. Traditionally this model focuses only on the product or service failure and diagnose by identifying the active and latent failures, different layers of defence and the holes (flaws) in the process.

Nowadays, this framework is not only used as a diagnostic tool helping companies overcome product or service failures and prevent accidents, but also revamp or revisit the entire design of the product/service and associated human interference elements.

Example:

I can think of one clear example where the Swiss Cheese Model can be used not only to identify root cause or underlying causes but also help the company redesign it

One of the problem of a product failure is the car engine seize. When it is analysed using the Swiss cheese model , there are multiple chain of failures that cause this.

Engine over heat -> no coolant circulation -> Coolant motor non function-> no charge from battery to run the motor-> Alternator non- function -> Alternator belt snap.

When we see the above, it is very evident that a 1000 RS belt snap causes an engine to seize resulting in product failure.

There are multiple latent failures resulting in flaws and ultimately the product failure. There are guidance on maintenance and advise on the alternator belt, but not all the time the failure of the same is due to wear and tear. Even then, the price the customer has to pay is huge compared to the actual price of the alternator belt. The customer will start to question the reliability of the product which is a key component of the quality of the product.

The reliability is the bond between the customer and the brand. Brand is a promise by the company to the customer which earns the trust of the customer resulting in brand loyalty.

Business simply cannot afford this. So coming back to the example, the Swiss-Cheese model in this case can be used to redesign the entire system of alternator and the dependencies of it, so as to ensure there is no product failure or there is sufficient time for the customer to mitigate the risk when such things happen.

So I leave it to you folks, the Swiss-Cheese model in my view can be a powerful tool to redesign the very core of the process / Products/Service to ensure reliability of the product so as to meet the promise to the customers that the brand represents.

Hence Business excellence adopting Swiss Cheese model framework in any of its improvement programs will produce transforming results for the business

By executing Swiss Cheese model in the process for Operational Excellence.

OpeEx is a philosophy for delivering value to the customers and stakeholders by utilizing principals of Lean, Six Sigma, TOC to optimize the processes and improving quality, productivity and reducing cost. Swiss Cheese model identifies how multiple layers can prevent failures.

 

Considering process for Order Fulfillment.

 

Defense layers are:

1. SOP's - Defines How to perform a Task

2. Training - Ensure employee understand SOP's.

3. Quality Checks - Inspection at each stage.

4. Automation - Bar Code scanning for mistake proofing's.

5. Customer Feedback - Captures issue's for continuous improvement.

 

Holes in the Cheese are:

1. SOP's may not be revised.

2. Training not effective.

3. Human error in inspection.

4. Automation may fail.

5. Feedback may not be analyzed properly.

 

This understanding helps in guiding improvements for driving business excellence as follows:

1. Executing FMEA's for proactive risk assessment.

2. Kaizen - driving continuous improvement projects for closing holes such as improving SOP's, training effectiveness and upgrading automations.

3. Improve process reliability by using Lean Six Sigma projects by reducing errors and variations in the process.

4. Performance management - developing KPI's to measure the effectiveness of processes and improve them.

3. 

First of all, let us understand what this concept is all about.

 

Swiss Chess Model

Wikipedia definition says

 

“The Swiss cheese model of accident causation illustrates that, although many layers of defence lie between hazards and accidents, there are flaws in each layer that, if aligned, can allow the accident to occur “

 

Wikipedia example:

In this below diagram, three hazard vectors are stopped by the defences, but one passes through where the "holes" are lined up.”

 

A Wikipedia diagram

image.png.413b80ecd3e7825d2bb291ffb1197923.png

 

How can the Swiss Cheese Model help you identify risks and strengthen the reliability of that process?

The model portrays the fact that cause of a failure may not be necessarily attributed to a single factor but it could be due to multiple factors.  This model essentially helps in identifying probable risks at every layer and gives an opportunity for us to improve/strengthen the defence of each layer and thereby improving the overall reliability of the process. As you can see in the above diagram, you can see the 2nd, 3rd, and 4th arrows (see the arrows from the top of the screen to the bottom for the order to be correct) getting blocked in their same/subsequent layer or at the final layer. But 1st arrow alone passes through all the defence layers and then becomes a failure!!  Here the holes (we are passing through) are the weaknesses and they provide the opportunity for us to identify them as risks

 

The cumulative effect of passing through all the holes in all of the layers successfully result in a failure.  This model helps in identifying the risks at the holistic process as well.

 

What would represent the “slices of cheese” (defence layers) and the “holes” (potential weaknesses) in your process?

 

Slices of Cheese (Defence Layers):

These are the protecting walls for the process without which we will not be able to achieve our objectives

 

Holes (Potential Weaknesses):

These are the loopholes through which costly mistakes/errors can happen because of which negative impacts occur -such as bad quality, reputation hit, revenue loss, business loss, material &/or personnel safety and hazard issues, market competitive edge loss…

 

How can this understanding guide improvement efforts using Business Excellence principles ?

As this model is in constant look out for risks, at every layer, and tries to address them, it helps the system to be continuously evolving and improving itself. The model also focuses its defence layers based on the customer objectives and therefore is highly customer focussed.  As a team wants to ensure that every defence layer in its process needs to be equipped properly, the process should be guided ably by strong, vibrant and proactive leaders..     

 

Example:

Now as we understand, as what this model is about, let us see with a practical example on this:

 

Process:  IT Product Development process – The IT team wanted to ensure good quality with on-time delivery. In this example, let us focus only on the Coding and Testing aspect   

Holes (Potential Weaknesses):

Manual - IT Dev Process

(Low Maturity)

Manual + Automation - IT Dev Process (High Maturity)

AI Based IT Process

Poor Quality code that could resulting in memory leaks, SQL injections leading to hacking, erroneous data,

Turning off automation for existing features (maintenance/support work) can result in code quality issues when being worked upon

Longer Initial learning curve for AI or AI prompting can result in some mental hurdle and that may prevent us from depriving some quality code output response

Poor test cases written resulting in allowing of erroneous data or not well-formed data

Lack of adequate knowledge on Test automation tool while writing complex test case scenarios

Poor AI prompt can lead to ambiguous AI response which can make to have an average code /test quality which can fall into the manual /manual+Automation category response

Application not working properly as an integrated system resulting in isolated modules not working

Lack of time in investing for automation tool learning, resulting in manual intervention and hence human error inducement, while dealing many test case scenarios

AI outcome cannot be simply taken for granted. Human oversight may be needed. Potential chance of human oversight is possible

  

  

Slices of Cheese (Defence Layers):

Manual - IT Dev Process

(Low Maturity)

Manual + Automation - IT Dev Process (High Maturity)

AI Based IT Process

Code self-review

Code review by a Static Code Analyzer tool

AI Tool based review

Code review by Peer

Code review (Functional knowledge) by SME/Architect

AI based Unit Test case generation

Customer Architect doing code review

Unit Test case automation

AI based Functional Test case generation

Unit Test case self-review by Developer

Functional Test case automation

AI based Regression Suite generation

Functional Test case self-review by Tester

Regression Test case automation

AI based Integration Test suite generation

Function Test case review by Test lead

Integration Test case automation

AI based seamless deployment

 

In this example, have consciously put the holes first and the Slices of cheese as the next. The reason being, in my experience (& IMHO), have seen that these holes have been addressed properly typically by these layers.   

 

Conclusion:

The example that is listed here calls out succinctly the defence layers and holes in the process. As this model supports, continuous exploration/analysis of risks, it gives an opportunity for the servicing providing organization to look for improvements in process optimization, customer focus, Value creation etc...   

 

Reference (for definition and diagram) : Wikipedia for Swiss Cheese Model

The Swiss Cheese Model, introduced by James Reason in 1991 in Human Error, explains that failures typically occur not because of a single mistake, but due to a series of gaps in multiple layers of defense. When these gaps align, they allow errors to pass through and lead to a major failure. For example while executing a greenfield project including building a data lake in cloud would involve the following slices of cheese - Project Governance, Requirement Gathering, Change Control Board, Scrum , Design principles, Maintaining code development standards, Efficient code reviews , thorough SIT and UAT testing, track risk and mitigation planning and providing post deployment monitoring and warranty support. The holes in the cheese slices could be - poorly defined scope, inadequate documentation of requirement or misunderstood requirements, inefficient management of the scope changes,
Infrequent sprint reviews or incomplete retrospectives, inefficient code reviews , limited testing of the features , inadequate documentation, no rollback plan or insufficient testing of the rollback plan in case of a failure. 

So upon aligning the multiple holes - a project may fail due to unclear scope > incomplete requirements > limited testing leading to production defect and client dissatisfaction. 

Applying the following checks or procedures can help improve the process - 
1. Regular steerco reviews to review the scope, progress and risks
2. Maintain a comprehensive project checklist
3. Extensive testing of the use cases and seek business approval 
4. Use retrospectives for continuous improvement

The good thing about the responses is that every response highlights usage of Swiss Cheese Model in different scenaios. Hence all the responses are a must read.

 

The best answer is from Akkul Dhand. Well done!

Create an account or sign in to comment

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.