SomeonescreensharessensitiveinformationCustomerhas morebrowser tabsthan can fiton screenUselessdemo of selfexplanatoryfunctionalityLet's haveanother callbefore theengagementKO 2monthsbeforeengagementTSaccountmanagershowed upAPIassessmentwon't havePostman /Swagger"Can yousee myscreen?""I haven'tused Zoomin such along time"BonkersEsraengagementApp isolder thanKelseyTestingin prodPrimarycontacts ison PTOduring theengagementDocumenteda findingbefore theKO endedIncomprehensibleVisiolong pausebecause noone wants toanswer thequestionThe onlyperson weneed didn'tshow up"youare onmute""sorry Iwasmuted"Architectgoes wayoverboardwith backend detailsCustomerattendees usethe call as theirown internalmeeting.A gaggle ofexecutivesjoin, but only1 persontalksAbsurdreportingrequirementsslopSomeonescreensharessensitiveinformationCustomerhas morebrowser tabsthan can fiton screenUselessdemo of selfexplanatoryfunctionalityLet's haveanother callbefore theengagementKO 2monthsbeforeengagementTSaccountmanagershowed upAPIassessmentwon't havePostman /Swagger"Can yousee myscreen?""I haven'tused Zoomin such along time"BonkersEsraengagementApp isolder thanKelseyTestingin prodPrimarycontacts ison PTOduring theengagementDocumenteda findingbefore theKO endedIncomprehensibleVisiolong pausebecause noone wants toanswer thequestionThe onlyperson weneed didn'tshow up"youare onmute""sorry Iwasmuted"Architectgoes wayoverboardwith backend detailsCustomerattendees usethe call as theirown internalmeeting.A gaggle ofexecutivesjoin, but only1 persontalksAbsurdreportingrequirementsslop

Appsec KO Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Someone screen shares sensitive information
  2. Customer has more browser tabs than can fit on screen
  3. Useless demo of self explanatory functionality
  4. Let's have another call before the engagement
  5. KO 2 months before engagement
  6. TS account manager showed up
  7. API assessment won't have Postman / Swagger
  8. "Can you see my screen?"
  9. "I haven't used Zoom in such a long time"
  10. Bonkers Esra engagement
  11. App is older than Kelsey
  12. Testing in prod
  13. Primary contacts is on PTO during the engagement
  14. Documented a finding before the KO ended
  15. Incomprehensible Visio
  16. long pause because no one wants to answer the question
  17. The only person we need didn't show up
  18. "you are on mute"
  19. "sorry I was muted"
  20. Architect goes way overboard with back end details
  21. Customer attendees use the call as their own internal meeting.
  22. A gaggle of executives join, but only 1 person talks
  23. Absurd reporting requirements
  24. slop