3. 3
Senior Product Marketing Manager,
UiPath
Today’s Presenters
Kevin Mooney
Senior Manager,
Customer Assurance, UiPath
Sebastian Ungureanu
4. 4
UiPath Business Automation Platform Security
features
Governance and Security with Orchestrator and
Automation Ops
Agenda for today
Q&A
The need for automation governance
Preventive Governance and UiPath promise
5. 5
UiPath places your trust at the core
of automation
End-to-end
secure platform
Transparent controls
and processes
Proven leadership
and performance
The UiPath Business Automation
Platform was built with security in
mind: our end-to-end capabilities
include tools and features to keep
your digital workforce as secure
and compliant as your human
one.
UiPath is trusted by industry-leading
companies from all over the world to
drive digital transformation with
minimal security risks.
At UiPath, we value your trust
above all. Find all you need to know
about our security, controls and
processes that impact your
workflows and data.
01 02 03
6. The UiPath Business Automation Platform
PROCESS MINING TASK MINING COMMUNICATIONS MINING IDEA CAPTURE & MANAGEMENT
LOW-CODE DEVELOPMENT UI & API AUTOMATION PROCESS ORCHESTRATION
INTELLIGENT
DOCUMENT PROCESSING
INTEGRATED NLP & AI/ML
Discover
Continuously uncover opportunities for process and task
improvements helping you identify the highest ROI areas
Automate
Get more done with a digital workforce that seamlessly collaborates with your
people and automates work via UI and API, powered with native integrated AI
Your Applications Your
People
Your
Processes Systems of record – ERP, CRM, HCM | Communications and Collaboration | Personal Productivity
ANALYTICS CONTINUOUS TESTING
UNIFIED MANAGEMENT
& GOVERNANCE
FLEXIBLE DEPLOYMENT
Operate
An enterprise-grade foundation to run and optimize
a mission critical automation program at high scale
7. ANALYTICS CONTINUOUS TESTING
UNIFIED MANAGEMENT
& GOVERNANCE
FLEXIBLE DEPLOYMENT
Get the operational and business
insight you need for your automation
program
Guarantee reliability by continuously
testing and monitoring your automations
and the applications they rely on
Manage and govern the integrated
platform and your automation program
centrally at the lowest cost of ownership
Deploy the complete cloud-native
platform SaaS or self-hosted for
maximum flexibility
Operate
An enterprise-grade foundation to run and optimize
a mission critical automation program at high scale
Your Applications Your
People
Your
Processes Systems of record – ERP, CRM, HCM | Communications and Collaboration | Personal Productivity
Discover
Automate
Featured UiPath Products: Insights | Test Suite | Orchestrator | Automation Ops | Automation Cloud | Automation Suite | Unified Admin
The UiPath Business Automation Platform
8. ANALYTICS CONTINUOUS TESTING UNIFIED MANAGEMENT & GOVERNANCE FLEXIBLE DEPLOYMENT
THE UIPATH BUSINESS AUTOMATION PLATFORM
1 /1
Operate
One place to manage everything—automations, users, and
every platform setting there is
Easily match the right users with the right tools and the
right permissions—no more no less
Dream platform for your IT– easy to manage, no overwork,
fully governable and secure
Manage risk proactively and don’t worry about
compliance—we’ve got you covered
“
Featured: Orchestrator Automation Ops Automation Cloud Automation Suite
Manage and govern the integrated platform and your automation
program centrally at the lowest cost of ownership
From a scalability and a supportability perspective, it’s a
big game changer for us.
As you start, you want to be able to scale, but you
can’t spend a ton of money supporting a hundred
different platforms. You have to be smart about it, and
UiPath for us was a really smart play.
Dave Espinoza, Director of Transformation
Cushman & Wakefield
9. 9
Why care
about governance?
Maintain standards and business continuity as you scale up
Deliver attended automation and citizen-led development across the organization
Simplify collaboration and ensure operational integrity as you develop automations
and integrate with IT systems
Enable
Scale & ROI
Reduce
Risk
Drive
Down Cost
Lower the cost of access management with Azure AD integration
Limit potential cost of downtime with HAA & DR
At no extra cost: Automation Ops & Data Service included with the platform
Enforce regulatory and policy compliance
Protect business data and privileged accounts
Monitor every bot and every action, keep a detailed audit trail
10. THE UIPATH BUSINESS AUTOMATION PLATFORM
1 minute
You can be up and running in less than 1 minute,
and focus on automation, not infrastructure.
24/7
UiPath Automation Cloud Enterprise offers 24/7
support, an uptime guarantee, and multi-tenant
separation of management.
6 regions
Services are hosted in the US, Europe, Japan,
Canada, Singapore or Australia, or any combination
you need with per-tenant region selection.
1 / 1
Operate Insights Test Suite Orchestrator Automation Ops Automation Cloud Automation Suite
We moved to the cloud so we can move quickly. We generated 300,000 hours savings in
our first year. I want citizen development in every business organization. Every group
has automation in their goals and KPIs.”
John Morrison, Director of Technology, Product and Enterprise Platforms & Services, T-Mobile
“
ATTESTATIONS FOR CORE PLATFORM
SOC 2 TYPE 2, ISO/IEC 27001 AND ISO 9001
11. 11
Platform-level features
SSO
(AAD & SAML)
Session Timeout & Limit
Concurrent Sessions
IP Range Restrictions
Customer Managed Keys Tenant Data Regions Deferred Update Ring
12. THE UIPATH BUSINESS AUTOMATION PLATFORM
Lower TCO
through enterprise-scale management that
integrates with the systems you already use
Reduce risk
with enterprise-wide monitoring, alerting,
analysis, and audit
Grow, and know,
your ongoing ROI
with capabilities that seamlessly optimize
automation for your people & processes
1 / 1
Insights Test Suite Orchestrator Automation Ops Automation Cloud Automation Suite
Manage, monitor, optimize, and
secure your robot workforce
Operate
14. 14
Credential Store Proxy
Load Balancing, WAF, DDOS protection
Orchestrator
App Service
Robot
Customer Network
1. The robot sends a poll/heartbeat to Orchestrator every
30 seconds. When it receives a reply to start an
automation, it makes an API call to retrieve credentials.
Orchestrator
SQL Service
Credential Store
TLS (Port 443)
2. Orchestrator makes a REST API
call to the Credential Proxy.
4. Credential Store retrieves the credential
and sends it to the Credential Proxy in
response to the API call.
5. Orchestrator responds to
the robots API call with the
credential it retrieved from
Credential Store. Nothing is
cached in the cloud.
3. The Credential Proxy receives the
request and makes a separate connection
to the internal credential store.
Firewall
Firewall
Trusted Network DMZ
Credential
Proxy
5. The Credential Proxy sends the
credential back to Orchestrator.
15. • Out of the box deployment
• Applies to existing install base*
• Deployed as part of UiPath Automation
Cloud
• Tightly connected to Studio and UiPath
Assistant
• Oversight and control without intrusion and
undue restrictions
• Deployed at organization level, tailored to
individual needs
*Provided the existing Studio version is compatible
THE UIPATH BUSINESS AUTOMATION PLATFORM
Insights Test Suite Orchestrator Automation Ops Automation Cloud Automation Suite
Operate
16. 16
Rules, Policy, Automation Ops
Workflow Analyzer rules are enforced by a
governance file which can be applied multiple
ways, but the easiest is via Automation Ops.
18. 18
Automation Security SDLC
Organization wide
policy control
enforcement
Scanning of
third-party
components on
developer machines
Integrated or
standalone
scanning of
Automation
best practices
Review of
Automation by
peer developers
Built-in
Change Control or
integration of CI/CD
for separation
of powers
Automation Ops /
Governance File
Malware
Scanner
Workflow
Analyzer
Peer Code
Review
Orchestrator
Package
Promotion
19. 19
High Availability RTO RPO Blue-Green
Deployment
Auto-Scaling
with Containers
What UiPath provides
Note: UiPath is also aligned to additionally meet ISO 27001/27017/27018 and ISO 9001.
99.9% 4h 15’
Compliance &
attestations
In Process
20. 20
UiPath secures automation end-to-end
UiPath
Identity Service
AUTHENTICATION
Orchestrator
Automation Ops
Studio
Workflow Analyzer
File-Based Policy
JSON files
Marketplace Security Certification
Deployed via registry keys or via Orchestrator
Org-wide guardrails for automation projects
Centralized automation management
Code analyzer for Automation Best Practices
Gold Silver
GOVERNANCE
COMMUNITY SECURITY
MANAGEMENT
Insights
Analyze and audit execution logs
MEASUREMENT
UiPath
Robots
Technology Alliance
21. 21
Session 4
Learn more about UiPath Automation Cloud
Security and Governance at:
UiPath Trust Portal
Automation Governance - whitepaper
Get the technical info on Automation Cloud
Security
Join us next week…
Providing an out-of-the box, enterprise-ready solution such as Automation Cloud, starts with a security-first mindset, which is built on three fundamental pillars. Number one - security has to run end-to-end. Which is why we've built powerful tools and guardrails across the entire UiPath Business Automation Platform. We’re going to talk about some of those today. Number two – we value your trust above all, and we honor that by being fully transparent with our controls and processes. And number three – and this ties into the first two – by being trusted with business-critical innovation, we’re able to have meaningful conversations and expand our capabilities for all our customers’ needs.
So let’s talk a bit about the UiPath Business Automation Platform in general.
You obviously have specific business outcomes to drive - profitable growth, cost transformation and customer experience improvements. This requires you to both build new processes and adapt and improve existing ones. Your processes exist across your line of business applications and in the work your people do. You need a platform to bridge these two worlds and help you build and change your business processes quickly.
Now, today’s webinar is focused on Automation Cloud as deployment method, and that’s by far the most comprehensive platform you could choose, with the fastest time-to-automation value and the highest ROI for new customers, with flexible enterprise-ready capabilities.
Enabling you to continuously watch business processes, watch the work, understand how it actually gets done—not just within an Oracle or an SAP system, but all-across: from email, to PDFs, to Excel spreadsheets, through multiple SaaS systems and traditional legacy systems as well—to discover issues to mitigate and remediate, and high-ROI areas to automate.
Then to efficiently and reliably automate them. We have powerful API integration in addition to UI emulation, long-running workflows and easy human-robot handoffs, the ability to seamlessly use AI/ML models and skills, to seamlessly process information and extract understanding from documents and communications.
And finally, to operate it all as a compliant, cost-effective, integrated platform. With analytics to track, measure, and manage automation performance, continuous testing to effortlessly ensure automation quality (and more generally the quality of any of your application development efforts), unified management and governance - so that you know the whole thing is compliant with your desired IT and security policies; and, of course, you can deploy the complete, cloud-native platform however you want, whether SaaS or self-hosted, for maximum flexibility—cloud-native all the way.
Operating a mission-critical automation program at enterprise scale is no small feat. But luckily UiPath offers all the right enterprise technologies and capabilities for customers to do just that while optimizing TCO, increasing compliance, and lowering time to value and risk. Analytics to track, measure, and manage the performance of the entire automation program, Testing to transform QA to a value provider, Unified Management and Governance for the integrated platform AND the automation program, and Flexible Deployment leaning on our cloud-first, customer choice approach allowing customers to get the integrated and compliant UiPath Business Automation Platform via SaaS or self-hosted in public cloud/on-prem.
With our integrated platform, you can control and manage the entire automation life cycle across all your automations. You get a single command center to manage governance, security, and compliance, and deploy as many services as you need to start quickly and stay flexible in the long run. Let’s look at what the main benefits for you are.
First of all, management and governance for both the integrated platform and your automation program gives you full and flexible control over the entire automation life cycle on the one hand, and the tools you’re using to run automations on the other. What this means is that you only need one single portal to conveniently manage users, automations, and platform-wide settings. And users can interact with automations naturally, and delegate only as much decision-making as they need to with long-running workflows that allow user input in complex situations.
Centralized governance then becomes easy to implement as well – since you can separate by organization, department or tenant, you can give each user role access to the right tools they need to build, run or test automations, and you connect every automation to its rightful owner. Granular governance inheritance means that you can define your governance settings however you need to, and users or automations will inherit the appropriate levels of access. And with oversight over your entire automation program, you are in control of the tools, processes, assets and automations that are available to everyone in the company.
But how easy is it for your IT team to do all of this? Well, the integrated platform means integrated user and admin experiences – and it’s easier and more time-effective to implement and update the platform for everyone in the organization from a single command center. When you opt for Automation Cloud as your deployment method, it’s easy to upgrade everyone to the latest version – and in true automation fashion, without having to manually configure each component. Automation users always benefit from the latest capabilities, and it all happens seamlessly for them.
If you’re just getting started, it’s important to get automation up-and-running quickly for a fast time-to-value – but it’s equally important to stay flexible in the long run. With unified management and governance, you can deploy as many services as you need to start. Then, as usage grows, you can gradually deploy the full platform capabilities to achieve lower incremental TCO. Plus, our platform’s open and extensible architecture allows you to integrate seamlessly with your value delivery toolchain.
Last but not least, you can also manage risk more effectively thanks to built-in security and compliance – from configurable alerts and full audit trails to capabilities like Robot endpoint protection. In a world where humans and robots work side by side, you needs end-to-end orchestration, governance, and security that’s easy to manage from one single place.
The UiPath Automation Cloud enables UiPath customers of any size to start instantly and scale as they need.
It takes one minute, one e-mail and one browser to sign up for the UiPath Automation Cloud for enterprise trial. Start prototyping your automations and let us worry about the infrastructure.
With the UiPath Automation Cloud for enterprise, you can:
Start instantly, scale infinitely
Invest in automation, not infrastructure
Every UiPath server product now has a Saas equivalent in Automation Cloud, either in production or available in public preview!
The UiPath Portal gives you access to all the products and makes for an easy place to administer your environment as well as manage organization-wide policy for robots and RPA DevOps.
It offers a 99.9% uptime guarantee, 24/7 support from UiPath, and multi-tenant management.
In fact, each tenant can be hosted in each of 5 regions: US, Europe, Japan, Canada or Australia
Obsessed with security? So are we! Regular audits confirm our rigorous coding and operational procedures, such that we have attestations including SOC 2 type 2 on our core platform, Veracode Verified Continuous and ISO 27001. Full details are available in our security whitepaper which we can provide as needed.
Automation Cloud Robots
Your SaaS workforce: Automation Cloudᵀᴹ Robots
Automation Cloud Robot – VM: unattended robot that supports customer software and configs and will scale as needed in the Automation Cloud. Takes on (almost) any unattended workload.
No requirement for your own Azure or AWS subscription
No IT resources needed to manage Orchestrator or Robot infrastructure
Support additional software installation, domain join and point-to-site VPN connection back to your own network
Managed from Orchestrator in Automation Cloud™
Automation Cloud Robot – Serverless: a “ready-when-you-are” pool of robots that immediately run automations
Runs cross-platform automations—API & Web—created in Studio (or Studio Web)
No VM or robot preparation needed – just send jobs to the Serverless Cloud Robot pool in Automation Cloud
Provides the instant test environment for Studio Web (preview)
Charged per execution minute via Cloud Robot Units and can run many jobs in parallel
Managed from Orchestrator in Automation Cloud™
Flexible pricing: Robot units provide flexible model for both
Think of UiPath Orchestrator as the manager that gets the most out of your robot workforce – and keeps an eye on what it’s doing.
It offers a single place to manage and optimize work across your attended and unattended robots, and control distribution of your automations
It logs all robot and user actions and can also flag business exceptions built into automations, for compliance
It has comprehensive dashboard based monitoring, and optional UiPath Insights can be added for trend analysis and even process ROI analysis from within Orchestrator’s UI
Orchestrator is available in the UiPath Automation Cloud as SaaS, in the public cloud as SaaS/IaaS, or installed on-premises.
Lower TCO
Deploy and update automations in seconds to entire Active Directory groups instead of managing automations per Orchestrator user
Reduce risk
Long-running workflows, queue SLAs, and personal workspaces optimize your return on people and robots working together
Grow, and know, your ongoing ROI
Comprehensive centralized logging and auditing of all robot actions, and alerts for business exception flags from automations. Integration with UiPath Insights provides ROI measurement from live Orchestrator data, to know your returns in real time, per process
Policy can be applied at multiple levels and is inherited to allow a customer to customize policies based on their organization needs. Examples include different policies for COE vs. citizen devs vs. unattended, etc.
https://docs.uipath.com/automation-ops/docs/about-policy-deployment