In early versions of PILAR, under XOR marks, several safeguards could be evaluated for maturity. PILAR used the highest valued out of the applicable ones. In order to select one of them for risk mitigation, you may mark other as n.a., or just leave them evaluated with a low value, even no valuation.

Currently, PILAR forces users to select one, and only one, safeguard to apply. The others are marked as n.s. (not selected).

When there is no risk in a security domain, selection makes no sense, and the user can not choose. This feature is used to establish a baseline or general maturity evaluation in a base domain. Later, on subdomains, one of the options may be selected.