I create a first initial risk
I create a measure (ther appears a residual risk
-The arrow does not go from initial risk to residual risk, but instead it only goes from measure to residial risk-
I connect the measure tot the residual risk.
- Now the initial risk and residual risk are connected, through the measure. So far so good -
I add an other risk to the measure.
-The arrow does not go from initial risk to the second residual risk, but instead it only goes from measure to second residial risk-
Not good. Every arrow should go from risk to risk.
not true, if you add a residual risk to a measure, this is a residual risk that is not derived from a initial risk, bit caused by a measure.
For example: a residual risk from adding a firewall is that if it fails it will block everything, also the legitimate traffic.
So the issue is different: the button "Add risk" should have a better name to avoid this confusion. Perhaps "Add risk caused by measure" ?
The trick is to split the residual risk, as soon as it is connected tot the initial risk. Instead of adding a risk to the measure. We should put this in the manual.
I think by naming the buttons better it should work intuitively. I can't think of something short, but a long description would be:
Split --> Add another residual risk derived from the same parent risk
Add risk --> Add a risk caused by this measure
Also reproducible:
This is not a bug.