Nicholas A. Southern, GRC and Cybersecurity Compliance Analyst

Fun, allegedly

GRC Bingo

Twenty-four things you will hear in an audit, a control review, or a Tuesday. Tap a square when it happens. Five in a row and you have earned a coffee, which you were going to have anyway.

How to playTap a square when the thing on it happens. Five in a row, any direction, wins. The middle square is already yours. New card shuffles the board; Copy card as text gives you something to paste in the channel.
No bingo yet. The evidence is pending.

Marks stay in this browser only. Nothing is sent anywhere, which is more than I can say for most evidence.

House rules

  • The center square is free because “evidence pending” is always true somewhere.
  • A screenshot with no date, no hostname, and no cursor counts as a square, not as evidence.
  • If someone says “that control is inherited” and cannot name who they inherit it from, that is two squares.
  • Winning does not close the POA&M.
Scroll to Top