Noauthenticationon storagebucketLack ofaccesscontrolsinsiderthreatExposureof privatemessagesNoregularauditsMinimumsecurityrulesTrustlossPublic cloudstoragemisconfigurationUserNotificationExposureof PIINo AuthControlsUnsecureddatabaseStorage ofsensitiveinformartionUse ofFirebaseBackendIdentitytheftriskIncidentResponseSQLinjectionemotionalharmReputationalDamageDataRetentionRisksAPI keysin clientappLack ofAPILayerLegacyInfrastructureMetadataexposureNoauthenticationon storagebucketLack ofaccesscontrolsinsiderthreatExposureof privatemessagesNoregularauditsMinimumsecurityrulesTrustlossPublic cloudstoragemisconfigurationUserNotificationExposureof PIINo AuthControlsUnsecureddatabaseStorage ofsensitiveinformartionUse ofFirebaseBackendIdentitytheftriskIncidentResponseSQLinjectionemotionalharmReputationalDamageDataRetentionRisksAPI keysin clientappLack ofAPILayerLegacyInfrastructureMetadataexposure

Technical Risk Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. No authentication on storage bucket
  2. Lack of access controls
  3. insider threat
  4. Exposure of private messages
  5. No regular audits
  6. Minimum security rules
  7. Trust loss
  8. Public cloud storage misconfiguration
  9. User Notification
  10. Exposure of PII
  11. No Auth Controls
  12. Unsecured database
  13. Storage of sensitive informartion
  14. Use of Firebase Backend
  15. Identity theft risk
  16. Incident Response
  17. SQL injection
  18. emotional harm
  19. Reputational Damage
  20. Data Retention Risks
  21. API keys in client app
  22. Lack of API Layer
  23. Legacy Infrastructure
  24. Metadata exposure