FinancialViabilityAdvertisingandpromotionsRegenerateFacilitiesexpensesOfficeequipmentVRCNochangelogUtilitiesPropertymanagementComplianceFalseTPMPBiometricsTPRSPersonnelSecuritySmokinghistoryDriver’slicenseOne-timeuseproductsor servicesFormerlycriticalOfficesoftwareandsuppliesVRC1 – VRO– Small Team– FD – VMOMgr TeamBirthday"ServiceOrganizationalControls (SOC)Audit Reports(Evaluationformerly known as“SSAE16”)TPMASharedSLAsCoupa1,340Criticals and“WhollyOutsourcedDepartment”sCongaPhysicalSecurityGovernmentagencyobligationsOverallcommentsSubcontractorAllvendorprogramsAccess@WorkRequestOCCEvaluationQueue3months14calendardaysVRC1 –VRO –VRC2Charity,club andassociationdues(Certain)equipmentsuppliersComplianceBankConfidentialDataFDRemediationTrackerReportFinancialCrimes2/14/2019ErnstandYoung"SSNFullNameE/R PlanandRelease3/26/20191stVRCAnalysisFISSupplierNameChangeCommitteeIneffectiveRiskRatingReport V2InformationSecurity –GeneralAssessmentModeratelyLowVRC1MinimallyEffectiveandIneffectiveValueAddedResellerBusinessContinuityInformationSecurity –CloudA completedMaterialityAssessmentLots ofdelegating1,069InformationSecurity -PersonnelT&E3DaysFinancialViabilityAdvertisingandpromotionsRegenerateFacilitiesexpensesOfficeequipmentVRCNochangelogUtilitiesPropertymanagementComplianceFalseTPMPBiometricsTPRSPersonnelSecuritySmokinghistoryDriver’slicenseOne-timeuseproductsor servicesFormerlycriticalOfficesoftwareandsuppliesVRC1 – VRO– Small Team– FD – VMOMgr TeamBirthday"ServiceOrganizationalControls (SOC)Audit Reports(Evaluationformerly known as“SSAE16”)TPMASharedSLAsCoupa1,340Criticals and“WhollyOutsourcedDepartment”sCongaPhysicalSecurityGovernmentagencyobligationsOverallcommentsSubcontractorAllvendorprogramsAccess@WorkRequestOCCEvaluationQueue3months14calendardaysVRC1 –VRO –VRC2Charity,club andassociationdues(Certain)equipmentsuppliersComplianceBankConfidentialDataFDRemediationTrackerReportFinancialCrimes2/14/2019ErnstandYoung"SSNFullNameE/R PlanandRelease3/26/20191stVRCAnalysisFISSupplierNameChangeCommitteeIneffectiveRiskRatingReport V2InformationSecurity –GeneralAssessmentModeratelyLowVRC1MinimallyEffectiveandIneffectiveValueAddedResellerBusinessContinuityInformationSecurity –CloudA completedMaterialityAssessmentLots ofdelegating1,069InformationSecurity -PersonnelT&E3Days

VMeOw - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
  1. Financial Viability
  2. Advertising and promotions
  3. Regenerate
  4. Facilities expenses
  5. Office equipment
  6. VRC
  7. No change log
  8. Utilities
  9. Property management
  10. Compliance
  11. False
  12. TPMP
  13. Biometrics
  14. TPRS
  15. Personnel Security
  16. Smoking history
  17. Driver’s license
  18. One-time use products or services
  19. Formerly critical
  20. Office software and supplies
  21. VRC1 – VRO – Small Team – FD – VMO Mgr Team
  22. Birthday"
  23. Service Organizational Controls (SOC) Audit Reports (Evaluation formerly known as “SSAE16”)
  24. TPMA
  25. Shared SLAs
  26. Coupa
  27. 1,340
  28. Criticals and “Wholly Outsourced Department”s
  29. Conga
  30. Physical Security
  31. Government agency obligations
  32. Overall comments
  33. Subcontractor
  34. All vendor programs
  35. Access@Work Request
  36. OCC
  37. Evaluation Queue
  38. 3 months
  39. 14 calendar days
  40. VRC1 – VRO – VRC2
  41. Charity, club and association dues
  42. (Certain) equipment suppliers
  43. Compliance
  44. Bank Confidential Data
  45. FD Remediation Tracker Report
  46. Financial Crimes
  47. 2/14/2019
  48. Ernst and Young
  49. "SSN
  50. Full Name
  51. E/R Plan and Release
  52. 3/26/2019
  53. 1st
  54. VRC Analysis
  55. FIS
  56. Supplier Name Change Committee
  57. Ineffective Risk Rating Report V2
  58. Information Security – General Assessment
  59. Moderately Low
  60. VRC1
  61. Minimally Effective and Ineffective
  62. Value Added Reseller
  63. Business Continuity
  64. Information Security – Cloud
  65. A completed Materiality Assessment
  66. Lots of delegating
  67. 1,069
  68. Information Security - Personnel
  69. T&E
  70. 3 Days