Exposureof PIIIdentitytheftriskNoregularauditsLack ofAPILayerStorage ofsensitiveinformartionNoauthenticationon storagebucketTrustlossReputationalDamageMinimumsecurityrulesUse ofFirebaseBackendAPI keysin clientappSQLinjectionUserNotificationLack ofaccesscontrolsDataRetentionRisksLegacyInfrastructureNo AuthControlsinsiderthreatIncidentResponseMetadataexposureUnsecureddatabaseemotionalharmExposureof privatemessagesPublic cloudstoragemisconfigurationExposureof PIIIdentitytheftriskNoregularauditsLack ofAPILayerStorage ofsensitiveinformartionNoauthenticationon storagebucketTrustlossReputationalDamageMinimumsecurityrulesUse ofFirebaseBackendAPI keysin clientappSQLinjectionUserNotificationLack ofaccesscontrolsDataRetentionRisksLegacyInfrastructureNo AuthControlsinsiderthreatIncidentResponseMetadataexposureUnsecureddatabaseemotionalharmExposureof privatemessagesPublic cloudstoragemisconfiguration

Technical Risk Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Exposure of PII
  2. Identity theft risk
  3. No regular audits
  4. Lack of API Layer
  5. Storage of sensitive informartion
  6. No authentication on storage bucket
  7. Trust loss
  8. Reputational Damage
  9. Minimum security rules
  10. Use of Firebase Backend
  11. API keys in client app
  12. SQL injection
  13. User Notification
  14. Lack of access controls
  15. Data Retention Risks
  16. Legacy Infrastructure
  17. No Auth Controls
  18. insider threat
  19. Incident Response
  20. Metadata exposure
  21. Unsecured database
  22. emotional harm
  23. Exposure of private messages
  24. Public cloud storage misconfiguration