Losing customer’s money - Revision history

Dcabra01 at 18:33, 24 June 2008

2008-06-24T18:33:07Z

Dcabra01 at 18:32, 24 June 2008

2008-06-24T18:32:31Z

Dcabra01 at 14:03, 24 June 2008

2008-06-24T14:03:55Z

Dcabra01 at 14:02, 24 June 2008

2008-06-24T14:02:50Z

Dcabra01 at 18:42, 23 June 2008

2008-06-23T18:42:00Z

Dcabra01 at 18:41, 23 June 2008

2008-06-23T18:41:36Z

Dcabra01 at 18:40, 23 June 2008

2008-06-23T18:40:31Z

Dcabra01 at 15:47, 20 June 2008

2008-06-20T15:47:04Z

Dcabra01 at 15:45, 20 June 2008

2008-06-20T15:45:18Z

Dcabra01 at 15:44, 20 June 2008

2008-06-20T15:44:48Z

← Older revision		Revision as of 18:33, 24 June 2008
Line 6:		Line 6:


−	~~'''~~Risk Factors==	+	==Risk Factors==
	* Unhappy customer		* Unhappy customer

@@ Line 1: / Line 1: @@
-== '''Description''' ==
+{{Template:Business Impact}}
 Losing a customer’s money can occur by an attacker, to the network going down, to a customer incurring costs for a product or service which was never used or received.
-== '''Risk Factors''' ==
+'''Risk Factors==
-• Unhappy customer
+* Unhappy customer
-• Disgruntle customers will leave
+* Disgruntle customers will leave
-• Company’s reputation is smudged
+* New and existing customers talk badly about their experiences to friends.
-• Legal action occurs
+* Company’s reputation is smudged
-• Threat to the network or an application
+* Legal action occurs
-• Invasion of customer’s privacy
+* Threat to the network or an application
-== '''Example''' ==
-'''Missing Equipment'''
+==Example==
 The application doesn’t reflect the correct status of the inventory and a customer purchases a device which is backordered. The customer becomes frustrated with the company when the item is not received. This customer talks to their colleagues about their experiences with your company. The company's reputation is smudged in the community.
-'''Hackers'''
+===Hackers===
 A hacker invades a network and finds its way through an application wall.  Customer’s unencrypted credit card data was located within an application database.  The data was opened and the credit card info was retrieved.  The customer is now experiencing identity fraud.  The customer now feels violated and doesn’t know how or why this occurred.
@@ Line 29: / Line 33: @@
-== '''Related Technical Impacts''' ==
+==Related Technical Impacts==
-- Loss of confidentiality
+* Loss of confidentiality
-== '''References''' ==
+*OWASP CLASP v1.2 [http://www.lulu.com/items/volume_62/1401000/1401307/3/print/OWASP_CLASP_v1.2_for_print_LULU.pdf]
-OWASP CLASP v1.2, http://www.lulu.com/items/volume_62/1401000/1401307/3/print/OWASP_CLASP_v1.2_for_print_LULU.pdf
+[[Category:Financial damage]]

@@ Line 1: / Line 1: @@
 == '''Description''' ==
 Losing a customer’s money can occur by an attacker, to the network going down, to a customer incurring costs for a product or service which was never used or received.
-== '''Risk Factors:''' ==
+== '''Risk Factors''' ==
 • Unhappy customer

@@ Line 1: / Line 1: @@
 Losing a customer’s money can occur by an attacker, to the network going down, to a customer incurring costs for a product or service which was never used or received.
 • Unhappy customer
@@ Line 18: / Line 18: @@
 • Invasion of customer’s privacy
 '''Missing Equipment'''
@@ Line 29: / Line 29: @@
 - Loss of confidentiality
 - Loss of accountability
 OWASP Top 10 - Ruby on Rails version, http://www.lulu.com/items/volume_62/1412000/1412042/1/print/Owasp-rails-security.pdf
 OWASP CLASP v1.2, http://www.lulu.com/items/volume_62/1401000/1401307/3/print/OWASP_CLASP_v1.2_for_print_LULU.pdf

← Older revision		Revision as of 18:42, 23 June 2008
Line 32:		Line 32:

	- Loss of confidentiality		- Loss of confidentiality
		+
	- Loss of accountability		- Loss of accountability

← Older revision		Revision as of 15:47, 20 June 2008
Line 17:		Line 17:
	'''Example:'''		'''Example:'''

−	The application doesn’t reflect the correct status of the inventory and a customer purchases a device which is backordered. The customer becomes frustrated with the company when the item is not received. This customer talks to their colleagues about their experiences with your company. The ~~company’s financial profits are decreased~~.	+	The application doesn’t reflect the correct status of the inventory and a customer purchases a device which is backordered. The customer becomes frustrated with the company when the item is not received. This customer talks to their colleagues about their experiences with your company. The company's reputation is smudged in the community.