BlackBerry Optics (CylanceOPTICS)

BlackBerry Optics is packaged with our Cylance AntiVirus. Combining the two helps us better understand threats that may or may not exist on a user's machine. The hardened policies allow us to block pretty much any and all malicious payloads that may try to find their way onto someone's machine.

You can set rules based on specific scenarios to run on machines. For example, you can use this to enable or disable machine learning to block or allow things that users regularly use. You can also log specific attacks on machines (for research later).

We’re currently using Cylance optics to find and address controls and gaps according to the MITRE Attack framework. It’s been valuable to look at the template framework, match it to known gaps as identified by our GRC team, and apply endpoint specific remediation to address potential concerns by Vector.

If you’re looking for a solution that enables mapping to maturity along with a specific framework and timeline, then Optics definitely makes that easier. If you have a small team and not a lot of spare time, then Optics may force some prioritization work on your team.