I am trying to create an Access database that will track open items generated by either Hazards or Vulnerabilities. I have created the following so far:
Item
ItemID (PK)
DateOpened
Item Description
SubSysID (FK)
Status
DateClosed
Resolution
Affects
System
SYSID (PK)
SysName
That has 1 or more
Subsystem
SubsysID (PK)
SystemID (FK)
Subsystem Name
My question is how do I proceed? Do I create Hazard and Vulnerability tables? If so, how do I relate them to the Item table? If the open item is related to a Hazard, it has different mitigation criteria than if it is related to a vulnerability (HAZMIT and VOLMIT tables?). Additionally, the risk index data is different for them as well (HazRisk and VulRisk tables?).
Any suggestions will be greatly appreciated.