Public cloudstoragemisconfigurationDataRetentionRisksinsiderthreatLack ofaccesscontrolsIdentitytheftriskMinimumsecurityrulesLack ofAPILayerTrustlossUserNotificationExposureof PIINo AuthControlsLegacyInfrastructureMetadataexposureIncidentResponseReputationalDamageAPI keysin clientappUse ofFirebaseBackendemotionalharmSQLinjectionExposureof privatemessagesNoregularauditsStorage ofsensitiveinformartionNoauthenticationon storagebucketUnsecureddatabasePublic cloudstoragemisconfigurationDataRetentionRisksinsiderthreatLack ofaccesscontrolsIdentitytheftriskMinimumsecurityrulesLack ofAPILayerTrustlossUserNotificationExposureof PIINo AuthControlsLegacyInfrastructureMetadataexposureIncidentResponseReputationalDamageAPI keysin clientappUse ofFirebaseBackendemotionalharmSQLinjectionExposureof privatemessagesNoregularauditsStorage ofsensitiveinformartionNoauthenticationon storagebucketUnsecureddatabase

Technical Risk Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Public cloud storage misconfiguration
  2. Data Retention Risks
  3. insider threat
  4. Lack of access controls
  5. Identity theft risk
  6. Minimum security rules
  7. Lack of API Layer
  8. Trust loss
  9. User Notification
  10. Exposure of PII
  11. No Auth Controls
  12. Legacy Infrastructure
  13. Metadata exposure
  14. Incident Response
  15. Reputational Damage
  16. API keys in client app
  17. Use of Firebase Backend
  18. emotional harm
  19. SQL injection
  20. Exposure of private messages
  21. No regular audits
  22. Storage of sensitive informartion
  23. No authentication on storage bucket
  24. Unsecured database