Swiss Cheese Model Calculator

Calculate your combined protection using the Swiss Cheese Model of layered defenses. Each layer reduces risk independently — together they provide much stronger protection than any single measure alone.

Toggle each layer on/off and adjust its effectiveness (%). The combined protection multiplies all active layers together.

90%
70%
50%
40%
25%
60%
80%
COMBINED PROTECTION
--
LowModerateGoodExcellent
Remaining Risk
--
Active Layers
--
Risk Reduction Factor
--
Equivalent Single Layer
--

What is the Swiss Cheese Model?

The Swiss Cheese Model is a risk analysis framework originally developed by James Reason in 1990 for understanding how accidents occur in complex systems like aviation and nuclear power. During the COVID-19 pandemic, it was widely adopted by epidemiologists and public health experts to illustrate how multiple imperfect protective measures combine to dramatically reduce transmission risk.

The core idea is simple: imagine each protective measure as a slice of Swiss cheese. Each slice has holes (imperfections), meaning no single measure provides 100% protection. However, when multiple slices are stacked together, the probability that a hazard passes through ALL the holes in ALL slices simultaneously becomes very small. The more layers you add, the lower the residual risk.

How the Formula Works

Each layer allows a fraction of risk to pass through (its "failure rate"). The combined risk is the product of all individual failure rates:

Combined Risk = (1 - Layer1) × (1 - Layer2) × ... × (1 - LayerN)

Overall Protection = 1 - Combined Risk

For example, if Vaccination blocks 90% of risk and Masks block 70%:

Combined Risk = (1 - 0.90) × (1 - 0.70) = 0.10 × 0.30 = 0.03 (3%)
Overall Protection = 1 - 0.03 = 0.97 = 97%

Understanding Each Layer

LayerMechanismTypical Effectiveness
VaccinationStimulates immune system to recognize and fight pathogen before serious illness develops60–95% (varies by variant and time since dose)
Masks (N95/KN95)Physically filters respiratory droplets and aerosols from inhaled and exhaled air50–95% (depends on mask type and fit)
Physical DistancingReduces exposure to respiratory droplets, which disperse and dilute with distance30–70% (greater distance = more protection)
VentilationDilutes airborne viral particles by increasing fresh air exchange or filtering recirculated air20–70% (depends on air changes per hour)
Hand HygieneRemoves viral particles from hands, preventing fomite-to-mucous-membrane transmission15–40% (more effective for non-airborne pathogens)
Testing & ScreeningIdentifies infected individuals so they can isolate before spreading to others40–80% (depends on test sensitivity and frequency)
Quarantine & IsolationSeparates exposed or infected individuals from susceptible populations60–90% (depends on compliance and timing)

Layered Defense Diagram

Swiss Cheese Model — Layered Defense 🦠 Vax Masks Distance Ventilation Hygiene Testing Quarantine 🛡 Each slice has holes, but stacked together they block nearly all risk

Layer Effectiveness Data

The effectiveness values used in this calculator are based on published epidemiological research and meta-analyses. It is important to note that real-world effectiveness varies based on many factors:

FactorIncreases EffectivenessDecreases Effectiveness
VaccinationRecent booster, healthy immune systemWaning immunity, immunocompromised, new variants
MasksN95/KN95 with good fitCloth mask, poor fit, worn below nose
DistancingOutdoors, ≥2 metersIndoors, crowded, poor ventilation
VentilationHEPA filters, open windows, high ACHRecirculated air, sealed rooms
TestingFrequent rapid testing, PCR confirmationInfrequent testing, high false-negative rate

History of the Model

The Swiss Cheese Model was first proposed by James Reason, a professor of psychology at the University of Manchester, in his 1990 book Human Error. Reason developed the model to explain how systemic failures in complex organizations (such as airlines, nuclear plants, and hospitals) arise not from a single catastrophic error, but from the alignment of multiple smaller failures across different defensive layers.

The model gained widespread public awareness during the COVID-19 pandemic when virologist Ian Mackay created a widely shared infographic in 2020 adapting Reason's framework to pandemic risk reduction. It became one of the most effective public health communication tools, helping people understand why no single measure was sufficient and why combining multiple imperfect measures dramatically reduces overall risk.

Worked Example

With all seven default layers active:

Risk = (1-0.90) × (1-0.70) × (1-0.50) × (1-0.40) × (1-0.25) × (1-0.60) × (1-0.80)
= 0.10 × 0.30 × 0.50 × 0.60 × 0.75 × 0.40 × 0.20
= 0.00054 = 0.054%

Combined Protection = 1 - 0.00054 = 99.95%

This means that even though no individual layer is perfect, the seven layers combined reduce the risk by over 99.9%. Removing any single layer increases the remaining risk significantly in relative terms, demonstrating the importance of maintaining all layers.

Frequently Asked Questions

Does this assume layers are independent?

Yes, the multiplicative model assumes each layer works independently. In reality, some layers may be partially correlated (e.g., a person who wears a mask is more likely to also wash hands frequently). The model provides a reasonable approximation but should be viewed as illustrative rather than precise.

Can I use this for risks other than COVID-19?

Absolutely. The Swiss Cheese Model applies to any layered defense scenario: cybersecurity (firewalls, encryption, authentication), food safety (HACCP controls), aviation safety, hospital infection control, and more. Simply replace the layer names and effectiveness values with those appropriate to your domain.

Why do the default values seem high?

The default values represent approximate mid-range effectiveness under ideal conditions. In practice, real-world effectiveness is often lower due to imperfect compliance, timing, and other factors. We encourage you to adjust the sliders to reflect your specific situation.

Is 100% protection achievable?

In theory, no single layer provides 100% protection, and even many layers combined cannot reach absolute zero risk. However, with sufficient layers at high effectiveness, the residual risk can be reduced to negligibly small levels — far below many risks we accept daily.