The start of any bowtie is the "hazard". A hazard is something in, around or part of the organization which has the potential to cause damage. Working with hazardous substances, driving a car, or storing sensitive data are for instance hazardous aspects of an organization while reading this article on your computer is not.