Settings

• "Remove all not applying countermeasures from the model." 

This setting is available on IriusRisk 3.0.0 or greater.  When the attributes of an architecture change, such as data flows and answers to the component questionnaires, then based on the rules, there may be some Risk Patterns that no longer apply.  In previous versions of IriusRisk (< 3.0), when these changes were made, a modal window would appear asking the user to confirm deletion of threats and countermeasures.

In the 3.0 and later version, this setting can be applied at all three levels of detail: Global, Product and Component.   By default this setting is disabled (so that if a rule determines that a risk pattern is applicable and the threats and countermeasures are imported into the model, and then the conditions of that rule change so that it is no longer true, then those threats and countermeasures will remain in the model).