RPA RPA Security and Governance 2

Question 1

What is 'bot sprawl' and why is it a governance concern?

Accepted Answer

Uncontrolled proliferation of bots without proper oversight, documentation, or maintenance

Answer

Bot sprawl occurs when bots are created without governance controls, leading to an unmanageable inventory of undocumented, unmaintained, or redundant automations.

Question 2

What is the purpose of an 'audit trail' in RPA?

Accepted Answer

Providing a detailed, tamper-evident log of all bot actions for compliance and forensic review

Answer

An audit trail creates an immutable record of what each bot did, when, and to what data — essential for compliance, investigations, and demonstrating regulatory adherence.

Question 3

What does 'least privilege' mean as applied to RPA bot accounts?

Accepted Answer

Bots should only be granted the minimum access rights needed to perform their specific tasks

Answer

The least privilege principle limits bot access rights to only what is required for its specific tasks, reducing the attack surface if the bot account is compromised.

Question 4

What is 'change control' in the context of RPA bot management?

Accepted Answer

A formal process for reviewing, approving, and documenting changes to bot workflows before deployment

Answer

Change control ensures all bot updates go through a structured review and approval process to prevent unauthorized or untested changes from reaching production.

Question 5

Which regulation most directly impacts how RPA bots handle personal data in the US healthcare sector?

Accepted Answer

HIPAA (Health Insurance Portability and Accountability Act)

Answer

HIPAA governs the privacy and security of protected health information (PHI) in the US — RPA bots processing healthcare data must comply with its requirements.

RPA - Robotic Process Automation Practice Test

RPA - Robotic Process Automation Practice Test

RPA RPA Security and Governance 2