SPAN—a DSS for security plan analysis