Which Option Would be correct ?

[dilshad_khan]

------------------------------
Dilshad Khan
------------------------------

[Mukeshh_k]

Hi Dilshad - Encrypting would ensure it remains protected, secure and encrypted and switching off all the logging events would ensure no sensitive infos are being logged into the log file - so these two would do the job ! only the process info would be visible such as process name, timestamps etc !

------------------------------
Kindly up vote this as "Best Answer" if it adds value or resolves your query in anyway possible, happy to help.

Regards,

Mukesh Kumar - Senior Automation Developer

NHS, England, United Kingdom, GB
------------------------------

[JosephRivera1]

Mukesh Kumae appears to be indicating that "encrypt the data in the work queue" will " guarantee that no customer data is visible in the Blue Prism log file".  Below is a snip of an 'encrypted' work queue with very visible customer name data in the Blue Prism Log File. 

------------------------------
Joseph Rivera
------------------------------

[Mukeshh_k]

Hi @JosephRivera1 - Did you switch off the stage logging params? -My response - "Encrypting would ensure it remains protected, secure and encrypted and switching off all the logging events would ensure no sensitive infos are being logged into the log file"  what it meant was 1st to encrypt and then switching off all the logging parameters - Encryption would hide the data in the work queue but would be visible in the log file and to avoid that you need to switch off the stage logging parameters as per the context of this question. 

Hope it clarifies my previous response.

Regards,

Mukesh Kumar - Senior Automation Developer

NHS, England, United Kingdom, GB
------------------------------

[JeffreyMcCormic]

Mukesh is correct - encryption will only ensure that the log data will not be readable OUTSIDE of the Blue Prism environment (in the event someone was able to exfiltrate log files).  It does NOT render the information unreadable inside of Blue Prism itself.

If you don't want the information to be visible anywhere, you will need to disable logging on the stages where this information is utilized/showing, or simple turn logging on the related processes/objects to 'errors only'.

------------------------------
Jeffrey McCormick
ECS RPA Team Lead
Fidelity Investments
Merrimack NH
------------------------------