I am trying to implement Rails as a Asset Management/Risk Assessment system. I have been trying to work out the best way to model this.
A picture of what I am thinking right now.
I would like to automate as much of the treating process as possible. Ideally, someone would fill in the information for a new asset, and rails would fill in the treatment table with the proper associations.
This automation relies on the 'physical type' of the asset entered. All assets of a specific physical type will have the same subset of threats. In turn, in order to treat these threats, we look at the 'threat name - physical type' to specify a subset of controls to be applied.
In the picture I linked, I showed the associations implemented so far.
Does anybody have a multi-model association example along these lines, or, even better, have any experience working a risk assessment system, and succeeded at modeling it?