If you develop a site that takes payment via credit card, even when processed by a third party processor, it&#x27;s pretty irresponsible not to be familiar with it. Even if you&#x27;re only attesting to being a SAQ A merchant, you&#x27;ll want to know why.  There&#x27;s not that much too it, and it&#x27;s really the minimum you should be thinking about.<p>That said, we&#x27;d all live in a better world of every web developer knew the OWASP recommendations inside and out.  I can dream.