More mapping formatting fixes

Mitigations satisfy technical requirements only under when they mitigate the relevant risks appropriately. Risk factors are used to determine this. The below table shows which mitigations are appropriate to which use cases or security profiles based on the risk factors determined in the risk assessment.

| Risk factors        | Requires mitigations |

|---------------------|--------------------------------|

| NET = 0             | SCFS                           |

| NET <= 0 or COM = 0 | SSCA                           |

|---------------------|----------------------|

| NET < 1             | SCFS                 |

| NET < 1 or COM < 1  | SSCA                 |

| NET > 0 and COM > 0 | FZ95 or ETIN or IMSL |

| Security Profile    | Requires mitigations           |