Simple Example Continued
What is the security of the provider? Is it a shared machine or a dedicated machine?
Is the order information stored in a database? Does this include credit information? What is the problem scope if the server is compromised?
How will credit authorization be handled?
What about product fulfillment? Who will ship the widgets? Will the fulfillment company have access to customer data? Are they secure?