Usersare localadminsNoDKIM /DMARCclosetspaghettiMinimalGroupPolicyNoEDRUnlicensedhardwareor softwareStaleObjectsolder than1yearWindowsServer2003/2008passwordspreadsheetTelnet>50%passwordscrackedDefaultadmincredentialsAdobeFlashWhitelisteddomains inemail filterPlain textpassworddiscoveredin shareInappropriteFirewallrules (notRDP)"We'venever hadanincident."GuestSSID butnoisolationDNSloggingnotenabledUnidentifiedPCIrequirementsComputersnot joinedto DomainPasswordsneverexpirecrackedadminpasswordWindows7WirelessPSK olderthan 2yearsNoMFA"We justuseWindowsDefender"WindowsXPManualBackupsNoDMZShares with"Everyone,Full Control""We're assecure aswe canbe."No DRPlanExternalRDPNoSPFrecord"We updatewhen thereareproblems"UnpatchedExchangeNooffsitebackupsIndividualpermissionsin sharesDefaultSNMPWritevalueNoSecurityAwarenessTrainingNo driveencryptionNo truenetworksegmentationNo IRPlanTeamviewer/ VNCUsersare localadminsNoDKIM /DMARCclosetspaghettiMinimalGroupPolicyNoEDRUnlicensedhardwareor softwareStaleObjectsolder than1yearWindowsServer2003/2008passwordspreadsheetTelnet>50%passwordscrackedDefaultadmincredentialsAdobeFlashWhitelisteddomains inemail filterPlain textpassworddiscoveredin shareInappropriteFirewallrules (notRDP)"We'venever hadanincident."GuestSSID butnoisolationDNSloggingnotenabledUnidentifiedPCIrequirementsComputersnot joinedto DomainPasswordsneverexpirecrackedadminpasswordWindows7WirelessPSK olderthan 2yearsNoMFA"We justuseWindowsDefender"WindowsXPManualBackupsNoDMZShares with"Everyone,Full Control""We're assecure aswe canbe."No DRPlanExternalRDPNoSPFrecord"We updatewhen thereareproblems"UnpatchedExchangeNooffsitebackupsIndividualpermissionsin sharesDefaultSNMPWritevalueNoSecurityAwarenessTrainingNo driveencryptionNo truenetworksegmentationNo IRPlanTeamviewer/ VNC

Risk Assessment Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
  1. Users are local admins
  2. No DKIM / DMARC
  3. closet spaghetti
  4. Minimal Group Policy
  5. No EDR
  6. Unlicensed hardware or software
  7. Stale Objects older than 1year
  8. Windows Server 2003/2008
  9. password spreadsheet
  10. Telnet
  11. >50% passwords cracked
  12. Default admin credentials
  13. Adobe Flash
  14. Whitelisted domains in email filter
  15. Plain text password discovered in share
  16. Inapproprite Firewall rules (not RDP)
  17. "We've never had an incident."
  18. Guest SSID but no isolation
  19. DNS logging not enabled
  20. Unidentified PCI requirements
  21. Computers not joined to Domain
  22. Passwords never expire
  23. cracked admin password
  24. Windows 7
  25. Wireless PSK older than 2 years
  26. No MFA
  27. "We just use Windows Defender"
  28. Windows XP
  29. Manual Backups
  30. No DMZ
  31. Shares with "Everyone, Full Control"
  32. "We're as secure as we can be."
  33. No DR Plan
  34. External RDP
  35. No SPF record
  36. "We update when there are problems"
  37. Unpatched Exchange
  38. No offsite backups
  39. Individual permissions in shares
  40. Default SNMP Write value
  41. No Security Awareness Training
  42. No drive encryption
  43. No true network segmentation
  44. No IR Plan
  45. Teamviewer / VNC