Understanding potential risks for RPA projects

Hi Guys,

As we all know, RPA is about enabling robots to perform processes and activities being done by humans.

which essentially means…
Robots would also have access to confidential data/credentials that humans have
And if that combines with any faulty design of automation workflows
can pose a Security Threat…

Isn’t it?

And security is non-negotiable factor for any enterprise or organization.

Thus, understanding potential security risks associated with a typical RPA project is important.
Let’s have a look at some of the risks outlined below:

  1. Robots having access to credentials normally used by human workers.
  2. Robots have access to privileged information: personal data of company staff, financial data.
  3. Unauthorized modifications of automation workflows in the development or testing phases.
  4. Unauthorized modifications of automation workflows or runtime parameters in the production environment.

What else do you see can be a security challenge for any RPA project?

Feel free to add.

Regards
Sonali

following topics can be included for audits

  • uncontrolled exposing of confidential data | e.g. logs
  • Robot ID Stealing risk analysis
1 Like

Hey guys,

Adding some more to the list as below:

  • uncontrolled exposing of confidential data through logs. ->Consider avoiding logging of sensitive data.

  • uncontrolled exposing of confidential data through transactions in queues. ->Consider masking of sensitive data before saving on queue.

  • Robot ID Stealing risk analysis

Regards
Sonali

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.