<commit_before>---
layout       : blocks/working-session
title        : Applying Top 10 to Standards
type         : workshop
track        : Owasp Top 10 2017
technology   : PCI
related-to   :
status       : draft
organizers   :
participants :
---

...intro text...

## Why

...why text...

## What

 - List standards that currently use Owasp Top 10 (PCI, etc...)
 - Map out how they use it
 - Map out what worked and what didn't work (i.e. cases where Top 10 was not correctly used or recommended)
 - Provide explicit guidance on how to use the new Owasp Top 10 2017
 - Create plan to reach out to current users of Top 10 (PCI) and proactively engage with them in updating it to the 2017 version

## Who

 - Companies that use or recommend the Owasp Top 10<commit_msg>Update Applying-Top-10-to-Standards.md<commit_after>---
layout       : blocks/working-session
title        : Applying Top 10 to Standards
type         : workshop
track        : Owasp Top 10 2017
technology   : PCI
related-to   :
status       : draft
organizers   :
participants :
---

>The OWASP Top 10 is a powerful awareness document for web application security. It represents a broad consensus about the most critical security risks to web applications. Project members include a variety of security experts from around the world who have shared their expertise to produce this list.
[OWASP](https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project)

## Why

The OWASP Top 10 2017 will be released in July or August 2017 after a public comment period ending on June 30. This Working Session will consider how to help users get maximum benefit from the 2017 version. 

## What

 - List standards that currently use OWASP Top 10 (PCI, etc...)
 - Map out how they use it
 - Map out what worked and what didn't work (i.e. cases where Top 10 was not correctly used or recommended)
 - Provide explicit guidance on how to use the new OWASP Top 10 2017
 - Create plan to reach out to current users of Top 10 (PCI) and proactively engage with them to update to the 2017 version
 
## Definition of Done

- Comprehensive list of standards that use OWASP Top 10
- Guidelines for using OWASP Top 10 2017
- Roadmap to encourage current Top 10 users to update to OWASP Top 10 2017


## Who

The target audience for this Working Session is:

 - Companies that use or recommend the Owasp Top 10
{'fraction_non_alphanumeric': 0.056900212314225054, 'fraction_numerical': 0.037367303609341825, 'mean_word_length': 3.126094570928196, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 4, 'https://': 1, 'lorem ipsum': 0, 'www.': 1, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7321077', 'n_tokens_mistral': 724, 'n_tokens_neox': 592, 'n_words': 345}