anchor.diff:  e.g. by creating a rough sketch of a data model as either
   informal diagrams, entity-relationship or class diagrams.
   Focus should be on overview: Where and how are what kinds of
  -data stored in what format. What are the relationsships between
  +data stored in what format. What are the relationships between
   the data elements?
   
  -Second, create an explicit model the _required domain data structures_. 
  +Second, create an explicit model the _required domain data structures_.
   
   Some typical questions might help in finding problems:
   
   * structural differences between those two models?
   * differences in data types?
  -* differences in plausibity or validity checking?
  +* differences in plausibility or validity checking?
   
   ====== Analyze Data Access
   Get an overview of data access paths: How is data read or written?
  
positive.code: * <<Analyze Data Access, Data Access>>
  * <<Analyze Data Size, Data Size>>
  * <<Analyze Data Validation, Data Validation>>
  * <<Analyze Data Actuality and Correctness, Data Actuality and Correctness>>
  * <<Analyze Data Access Protection, Data Access Protection>>
  * <<Analyze Backup, Backup>>
  
  ====== Analyze Data Structures
  
negative.code: * Peoples' address typically changes something between 2-10 times during
  their lives.
  * Empirical studies show that between 5 and 10% of business or job email addresses
  become invalid every year.
  --
  
  * Which parts of the data are subject to (what kind of) changes?
  * Are parts of the data known to be invalid or contain invalid portions?
  * Does the System handle potentially wrong or invalid data appropriately?
  * Are there (organizational or technical) processes in place that deal with
  data inconsistencies or faults?
  
  ====== Analyze Data Access Protection
  
  * Is there an overview what kinds of data need which level of (access) protection?
  * Is there a security concept in place covering protection against unauthorized access?
  ** How are users/roles/organizations _allowed_ to access data managed?
  ** Is there a process in place to revoke access for outdated users/roles/organizations?
  * Is there a plan what shall happen in case of security breaches or data theft?
  * How is data theft recognized?
  