Avoidssharingcredentialswith anyoneKnowshow toreport anincidentUses onlyapprovedtools forworkDouble-checksexternalrecipientsbefore sendingCreates astrongpassphrase(not just apassword)Reports asuspiciousemailUsescompany‑approvedcloud storageFree!Declines toshareinformationover thephoneCompletesannualsecuritytrainingShredsdocumentswithpersonal orclient info“Thislooks likea phishingattempt”Recognizesa fake loginpageHoveringover linksbeforeclickingValidatespayment orchangerequeststhrough asecond channelVerifiessenderemailaddressAvoidspublicWi‑Fi forwork tasksKnows not toplugunknownUSBs intodevicesRecognizeswhensomeone asksfor too muchinformationUsesmulti‑factorauthenticationAvoidssendingsensitive infounencryptedAvoids takingphotos/screenshotsof client dataAvoidsdownloadingunknownapplicationsMentions“Thinkbeforeyou click”Recognizesan “urgent”or “act now”red flagLockscomputerwhensteppingawayStoressensitivefilessecurelyDeletes datathey’re nolongerauthorized toretainUsesapprovedsystems forwork files“If it seemstoo good tobe true, itprobably is”Identifiessuspiciousactivity ontheir accountNoticesspelling/grammarerrors in asuspicious emailUses securefile transferinstead ofemailattachmentForwardsunusualemails to thesecurityteamDeletesunexpectedattachmentsIdentifiesa spoofedsendernameRecognizesa scam orfake offerKnows theorganization’ssecuritypolicies existRecognizesasuspiciousQR codeUpdatessoftwarewhenpromptedReports asuspicioustextmessageAvoidssharingcredentialswith anyoneKnowshow toreport anincidentUses onlyapprovedtools forworkDouble-checksexternalrecipientsbefore sendingCreates astrongpassphrase(not just apassword)Reports asuspiciousemailUsescompany‑approvedcloud storageFree!Declines toshareinformationover thephoneCompletesannualsecuritytrainingShredsdocumentswithpersonal orclient info“Thislooks likea phishingattempt”Recognizesa fake loginpageHoveringover linksbeforeclickingValidatespayment orchangerequeststhrough asecond channelVerifiessenderemailaddressAvoidspublicWi‑Fi forwork tasksKnows not toplugunknownUSBs intodevicesRecognizeswhensomeone asksfor too muchinformationUsesmulti‑factorauthenticationAvoidssendingsensitive infounencryptedAvoids takingphotos/screenshotsof client dataAvoidsdownloadingunknownapplicationsMentions“Thinkbeforeyou click”Recognizesan “urgent”or “act now”red flagLockscomputerwhensteppingawayStoressensitivefilessecurelyDeletes datathey’re nolongerauthorized toretainUsesapprovedsystems forwork files“If it seemstoo good tobe true, itprobably is”Identifiessuspiciousactivity ontheir accountNoticesspelling/grammarerrors in asuspicious emailUses securefile transferinstead ofemailattachmentForwardsunusualemails to thesecurityteamDeletesunexpectedattachmentsIdentifiesa spoofedsendernameRecognizesa scam orfake offerKnows theorganization’ssecuritypolicies existRecognizesasuspiciousQR codeUpdatessoftwarewhenpromptedReports asuspicioustextmessage

General Security Awareness - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
  1. Avoids sharing credentials with anyone
  2. Knows how to report an incident
  3. Uses only approved tools for work
  4. Double-checks external recipients before sending
  5. Creates a strong passphrase (not just a password)
  6. Reports a suspicious email
  7. Uses company‑approved cloud storage
  8. Free!
  9. Declines to share information over the phone
  10. Completes annual security training
  11. Shreds documents with personal or client info
  12. “This looks like a phishing attempt”
  13. Recognizes a fake login page
  14. Hovering over links before clicking
  15. Validates payment or change requests through a second channel
  16. Verifies sender email address
  17. Avoids public Wi‑Fi for work tasks
  18. Knows not to plug unknown USBs into devices
  19. Recognizes when someone asks for too much information
  20. Uses multi‑factor authentication
  21. Avoids sending sensitive info unencrypted
  22. Avoids taking photos/screenshots of client data
  23. Avoids downloading unknown applications
  24. Mentions “Think before you click”
  25. Recognizes an “urgent” or “act now” red flag
  26. Locks computer when stepping away
  27. Stores sensitive files securely
  28. Deletes data they’re no longer authorized to retain
  29. Uses approved systems for work files
  30. “If it seems too good to be true, it probably is”
  31. Identifies suspicious activity on their account
  32. Notices spelling/grammar errors in a suspicious email
  33. Uses secure file transfer instead of email attachment
  34. Forwards unusual emails to the security team
  35. Deletes unexpected attachments
  36. Identifies a spoofed sender name
  37. Recognizes a scam or fake offer
  38. Knows the organization’s security policies exist
  39. Recognizes a suspicious QR code
  40. Updates software when prompted
  41. Reports a suspicious text message