emotionalharmMetadataexposureUnsecureddatabaseReputationalDamageStorage ofsensitiveinformartionDataRetentionRisksExposureof PIINo AuthControlsIdentitytheftriskUse ofFirebaseBackendSQLinjectionNoregularauditsLegacyInfrastructureUserNotificationLack ofaccesscontrolsLack ofAPILayerExposureof privatemessagesinsiderthreatAPI keysin clientappNoauthenticationon storagebucketIncidentResponseMinimumsecurityrulesTrustlossPublic cloudstoragemisconfigurationemotionalharmMetadataexposureUnsecureddatabaseReputationalDamageStorage ofsensitiveinformartionDataRetentionRisksExposureof PIINo AuthControlsIdentitytheftriskUse ofFirebaseBackendSQLinjectionNoregularauditsLegacyInfrastructureUserNotificationLack ofaccesscontrolsLack ofAPILayerExposureof privatemessagesinsiderthreatAPI keysin clientappNoauthenticationon storagebucketIncidentResponseMinimumsecurityrulesTrustlossPublic cloudstoragemisconfiguration

Technical Risk Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. emotional harm
  2. Metadata exposure
  3. Unsecured database
  4. Reputational Damage
  5. Storage of sensitive informartion
  6. Data Retention Risks
  7. Exposure of PII
  8. No Auth Controls
  9. Identity theft risk
  10. Use of Firebase Backend
  11. SQL injection
  12. No regular audits
  13. Legacy Infrastructure
  14. User Notification
  15. Lack of access controls
  16. Lack of API Layer
  17. Exposure of private messages
  18. insider threat
  19. API keys in client app
  20. No authentication on storage bucket
  21. Incident Response
  22. Minimum security rules
  23. Trust loss
  24. Public cloud storage misconfiguration