It would be beneficial if people could either choose a mitigation and see it's effect or have a mitigation recommended and see it's effect.
This would be doable but would require a VERIS<->Control mapping of some type.
It also might make sense to have a 'control coverage' setting to help estimate the effect if a control is not 100% universally implemented.
It would be beneficial if people could either choose a mitigation and see it's effect or have a mitigation recommended and see it's effect.
This would be doable but would require a VERIS<->Control mapping of some type.
It also might make sense to have a 'control coverage' setting to help estimate the effect if a control is not 100% universally implemented.