simulation questions

[redshiftzero]

A tool should be able to ideally answer questions like the following:

• Delete [a given countermeasure], what happens? What threats increase in residual risk and what is the total increase in residual risk?
• Add [a given countermeasure], what happens? What threats decrease in residual risk and what is the total decrease in residual risk? (enables one to compare the implications of countermeasure A versus countermeasure B)
• Delete [a given DFD element], what happens? What threats are removed? Which risk scores change in the threats that are still present? How does total residual risk change?
• Add [one or more new DFD elements], what happens? What new threats are produced? Which risk scores change in the threats that are still present? How does total residual risk change?