Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Stakeholders / Everyone with PHP in the path / Organisations running PHP / Online shops and payments
Online shops and payments: its risk register
Magento and WooCommerce shops that take cards: PCI DSS applies, and an outage is lost revenue by the hour.
Kind group · Assigned here 2 · In its register 2
The register
Assigned here, or arriving through a part of this stakeholder. The part played is the one recorded for whoever holds the assignment.
| Risk | Rating | Kind | Part played | Controls |
|---|---|---|---|---|
| R05 A web application firewall taken for a patch | 16 high | Security | bearer | PCI DSS 6.4.2, CIS Controls 13.10, NIST SP 800-53 SC-7, ISO/IEC 27001 A.8.20 +1 |
| R01-5 Popular applications compromised before authentication | 15 high | Security | bearer | OWASP Top 10s A06:2021, PCI DSS 6.3.1, CIS Controls 16.4 |
Where its risks sit
The standards its register touches
PCI DSS (2), CIS Controls (2), OWASP Top 10s (1), NIST SP 800-53 (1), ISO/IEC 27001 (1), Cyber Essentials (1)