Meet ThreatPad!

Should I add Effective / Expensive feature?

I’m experimenting with effective / expensive widgets when editing mitigations:

Effective has ? :man_shrugging:t3: / low :shield: / medium :shield::shield: / high :shield::shield::shield:. (What’s better emojis? I started with :flexed_biceps: but it requires skin colors…)
Expensive has ? :man_shrugging:t3: / low :money_bag: / medium :money_bag::money_bag: / high :money_bag::money_bag::money_bag:. (Also not the perfect emoji, because not all expense is money…)

Pro: Educates that feasibility and costs matter.

Pro: Educates that not all protection is 100%.

Pro: Educates that some mitigations have good ROI.

Contra: With the words of Github, “Anything added dilutes everything else.”

:red_question_mark: Should I merge the feature?

Context

  • Threatpad already has a style for threats and mitigation which can be :white_check_mark: done / :star: favorite / normal style / :wastebasket: rejected. This educates about propose-then-choose flow and that only done mitigation really counts. It’s only visible when editing.
  • Threatpad already has “How likely?” / “How bad?” which can be ? :man_shrugging:t3: / low :sleeping_face: / medium :neutral_face::neutral_face: / high :scream::scream::scream:. This educates about qualitative risk assessment. It is already shown in the threat view.
  • All the select features are designed so that they don’t annoy you when you don’t use them.
1 Like