When marking a threat as 'Not Applicable', the 'Risk Resp.' field still appears as 'Unmitigated' - Is this the expected behavior?
This is the expected outcome - the "risk resp" field showing "Unmitigated: 100%", means that none of the relevant countermeasures have been put in place for that particular threat.
Even if a threat has been labeled as N/A and requires no further action, it will still show as unmitigated if no countermeasures have been implemented.
Comments
0 comments
Article is closed for comments.