Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Stakeholders / Everyone with PHP in the path / The press / This newsroom

This newsroom: its risk register

One editor and a team of software agents that read the open web, hold vault credentials and publish to a live site within minutes. Its own risks are on this register too.

Kind organisation · Assigned here 1 · In its register 5

The register

Assigned here, or arriving through a part of this stakeholder. The part played is the one recorded for whoever holds the assignment.

RiskRatingKindPart playedControls
R07 Decisions made on numbers that measure something else12 highGovernancetreaterNIST CSF 2.0 GV.RM-01, ISO/IEC 27001 6.1.2, OWASP Top 10s LLM09:2025
R10 This newsroom's own agents are steered, leak or mislead12 highAI and agentsthrough The editor (owner), The newsroom's agents (treater), This site's readers (bearer)EU AI Act Art.50, NIST AI RMF MANAGE-2.4, ISO/IEC 42001 6.1.3, OWASP Top 10s LLM06:2025
R10-1 Prompt injection through captured material12 highAI and agentsthrough The newsroom's agents (treater), The editor (owner)OWASP Top 10s LLM01:2025, NIST AI RMF MEASURE-2.7, EU AI Act Art.15
R10-3 A status word stronger than its evidence12 highAI and agentsthrough The newsroom's agents (source), This site's readers (bearer), The editor (owner)OWASP Top 10s LLM09:2025, EU AI Act Art.50
R10-2 A vault key or token published10 mediumAI and agentsthrough The newsroom's agents (treater), The editor (owner), This site's readers (bearer)OWASP Top 10s LLM02:2025, GDPR Art.32, ISO/IEC 27001 A.5.14

Where its risks sit

Likelihood / impact1 Minor2 Moderate3 Significant4 Major5 Severe
5 Happening5 10 15 20 25
4 Likely4 8 12 R07 R10-316 20
3 Possible3 6 9 12 R10 R10-115
2 Unlikely2 4 6 8 10 R10-2
1 Rare1 2 3 4 5

Its parts

Who it shares risks with

The press (1), Wiz Research (1), Board and executives (1)

The standards its register touches

OWASP Top 10s (4), ISO/IEC 27001 (2), EU AI Act (2), NIST AI RMF (2), NIST CSF 2.0 (1), ISO/IEC 42001 (1), GDPR (1)