# This site's readers: its php2shell risk register

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

The fractal risk register for This site's readers: 3 risks assigned to it or arriving through its parts, the part it plays in each and who it shares them with.

[Stakeholders](../index.html) / [Everyone with PHP in the path](../../../grc/stakeholders/world/index.html) / [The press](../../../grc/stakeholders/media/index.html) / [This newsroom](../../../grc/stakeholders/newsroom/index.html) / This site's readers

# This site's readers: its risk register

Including other people's models, which read llms.txt and the markdown twins.

**Kind** group · **Assigned here** 3 · **In its register** 3

## The register

Assigned here, or arriving through a part of this stakeholder. The part played is the one recorded for whoever holds the assignment.

| Risk | Rating | Kind | Part played | Controls |
|---|---|---|---|---|
| [R10 This newsroom's own agents are steered, leak or mislead](../../../grc/risks/r10/index.html) | **12** high | AI and agents | **bearer** | [EU AI Act Art.50](../../../grc/frameworks/euaiact/index.html#c-art-50), [NIST AI RMF MANAGE-2.4](../../../grc/frameworks/nistairmf/index.html#c-manage-2-4), [ISO/IEC 42001 6.1.3](../../../grc/frameworks/iso42001/index.html#c-6-1-3), [OWASP Top 10s LLM06:2025](../../../grc/frameworks/owasp/index.html#c-llm06-2025) |
| [R10-3 A status word stronger than its evidence](../../../grc/risks/r10-3/index.html) | **12** high | AI and agents | **bearer** | [OWASP Top 10s LLM09:2025](../../../grc/frameworks/owasp/index.html#c-llm09-2025), [EU AI Act Art.50](../../../grc/frameworks/euaiact/index.html#c-art-50) |
| [R10-2 A vault key or token published](../../../grc/risks/r10-2/index.html) | **10** medium | AI and agents | **bearer** | [OWASP Top 10s LLM02:2025](../../../grc/frameworks/owasp/index.html#c-llm02-2025), [GDPR Art.32](../../../grc/frameworks/gdpr/index.html#c-art-32), [ISO/IEC 27001 A.5.14](../../../grc/frameworks/iso27001/index.html#c-a-5-14) |

## Where its risks sit

| Likelihood / impact | 1 Minor | 2 Moderate | 3 Significant | 4 Major | 5 Severe |
|---|---|---|---|---|---|
| 5 Happening | 5 | 10 | 15 | 20 | 25 |
| 4 Likely | 4 | 8 | 12 [R10-3](../../../grc/risks/r10-3/index.html) | 16 | 20 |
| 3 Possible | 3 | 6 | 9 | 12 [R10](../../../grc/risks/r10/index.html) | 15 |
| 2 Unlikely | 2 | 4 | 6 | 8 | 10 [R10-2](../../../grc/risks/r10-2/index.html) |
| 1 Rare | 1 | 2 | 3 | 4 | 5 |

## Who it shares risks with

[The editor](../../../grc/stakeholders/newsroom-editor/index.html) (3), [The newsroom's agents](../../../grc/stakeholders/newsroom-agents/index.html) (3)

## The standards its register touches

[OWASP Top 10s](../../frameworks/owasp/index.html) (3), [EU AI Act](../../frameworks/euaiact/index.html) (1), [NIST AI RMF](../../frameworks/nistairmf/index.html) (1), [ISO/IEC 42001](../../frameworks/iso42001/index.html) (1), [GDPR](../../frameworks/gdpr/index.html) (1), [ISO/IEC 27001](../../frameworks/iso27001/index.html) (1)


---
site v0.8.1 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/grc/stakeholders/readers/index.html