Lack ofaccesscontrolsMinimumsecurityrulesLack ofAPILayerStorage ofsensitiveinformartioninsiderthreatLegacyInfrastructureUnsecureddatabaseUse ofFirebaseBackendTrustlossMetadataexposureIncidentResponseNo AuthControlsAPI keysin clientappNoregularauditsExposureof privatemessagesSQLinjectionemotionalharmIdentitytheftriskReputationalDamageExposureof PIIDataRetentionRisksNoauthenticationon storagebucketUserNotificationPublic cloudstoragemisconfigurationLack ofaccesscontrolsMinimumsecurityrulesLack ofAPILayerStorage ofsensitiveinformartioninsiderthreatLegacyInfrastructureUnsecureddatabaseUse ofFirebaseBackendTrustlossMetadataexposureIncidentResponseNo AuthControlsAPI keysin clientappNoregularauditsExposureof privatemessagesSQLinjectionemotionalharmIdentitytheftriskReputationalDamageExposureof PIIDataRetentionRisksNoauthenticationon storagebucketUserNotificationPublic cloudstoragemisconfiguration

Technical Risk Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Lack of access controls
  2. Minimum security rules
  3. Lack of API Layer
  4. Storage of sensitive informartion
  5. insider threat
  6. Legacy Infrastructure
  7. Unsecured database
  8. Use of Firebase Backend
  9. Trust loss
  10. Metadata exposure
  11. Incident Response
  12. No Auth Controls
  13. API keys in client app
  14. No regular audits
  15. Exposure of private messages
  16. SQL injection
  17. emotional harm
  18. Identity theft risk
  19. Reputational Damage
  20. Exposure of PII
  21. Data Retention Risks
  22. No authentication on storage bucket
  23. User Notification
  24. Public cloud storage misconfiguration