ID Handling

Description:

Define how identifiers are handled in the methodology configuration.

Requirements:

  • IDs must be unique, stable, and deterministic.
  • Do not use random IDs for elements referenced in:
    • Score mappings
    • Matrices
    • Categories
    • Attacker types
    • Imported project data

Effect:

Enables CycurRISK to correctly map categories, scores, and risks.

Constraints:

  • Changing IDs without updating references may break calculations and imports.
  • This is critical when objects are cross-referenced across multiple arrays.