TrustlossNoauthenticationon storagebucketemotionalharmUserNotificationAPI keysin clientappUse ofFirebaseBackendIdentitytheftriskReputationalDamageNo AuthControlsLack ofaccesscontrolsExposureof privatemessagesNoregularauditsIncidentResponseLegacyInfrastructureMinimumsecurityrulesMetadataexposureExposureof PIIPublic cloudstoragemisconfigurationSQLinjectionUnsecureddatabaseStorage ofsensitiveinformartioninsiderthreatDataRetentionRisksLack ofAPILayerTrustlossNoauthenticationon storagebucketemotionalharmUserNotificationAPI keysin clientappUse ofFirebaseBackendIdentitytheftriskReputationalDamageNo AuthControlsLack ofaccesscontrolsExposureof privatemessagesNoregularauditsIncidentResponseLegacyInfrastructureMinimumsecurityrulesMetadataexposureExposureof PIIPublic cloudstoragemisconfigurationSQLinjectionUnsecureddatabaseStorage ofsensitiveinformartioninsiderthreatDataRetentionRisksLack ofAPILayer

Technical Risk Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Trust loss
  2. No authentication on storage bucket
  3. emotional harm
  4. User Notification
  5. API keys in client app
  6. Use of Firebase Backend
  7. Identity theft risk
  8. Reputational Damage
  9. No Auth Controls
  10. Lack of access controls
  11. Exposure of private messages
  12. No regular audits
  13. Incident Response
  14. Legacy Infrastructure
  15. Minimum security rules
  16. Metadata exposure
  17. Exposure of PII
  18. Public cloud storage misconfiguration
  19. SQL injection
  20. Unsecured database
  21. Storage of sensitive informartion
  22. insider threat
  23. Data Retention Risks
  24. Lack of API Layer