Issue:
PS-1 by Phil.Spiby (2010-02-11) minor_technical issue Resolution: Accept. Status: open
The CBIS model indicates attributes impact before/after mitigation and probability before/after mitigation.
I understand these attributes to be the values for the risk and mitigation attributes of the same names. Therefore either:
a) these attributes in the risk_management_feedback object are derived from the attributes in the risk and mitigation objects
(not sure how to deal with derived attributes in a template or even if they are allowed!)
b) these attributes represent values that are to be used when creating the risk and mitigation objects, but this seems very
strange since the risk_management_feedback is supposed to be feedback on the risk management activities implying that the
risk and mitigation objects already exist