 For example, if theft is a threat to security, then fitting locks is a mitigation; but that a door can be locked is a functional requirement.The counter point is that Use Cases are not from Cognitive Science roots, whereas i* and KAOS are.Indeed, the literature behind Use Cases does not include discussion Goal Intention, Goal Refinement, Ends-Means, does not call out Rasmussen et cetera.