Skip Navigation

How does 
BlackBerry Intelligent Security
 determine a user’s geozone risk level?

The 
BlackBerry Intelligent Security
 services process event and location data from apps to learn about the locations (geozones) that are typical for each user at different times. You can configure a 
BlackBerry Intelligent Security
 policy to execute risk actions based on the user’s proximity to a learned geozone.
For example, if a user is in the range of a learned geozone at a given day and time, their geozone risk level is low and the assigned policy executes the actions for the low risk level. Likewise, if the user is out of the range of a learned geozone, their geozone risk level is medium or high (depending on how far out of range the user is) and the assigned policy executes the corresponding actions. You can customize the range for each geozone risk level.
The services can learn new geozones for a user over time. The first time a user occupies a new location that is outside of their typical geozones, their behavioral and geozone risk levels may be higher than usual, but if the user is reported at that location with greater frequency, it can become a new learned geozone that results in a lower risk level.
You can use the 
BlackBerry Intelligent Security Analytics Portal
 to define specific geozones, each with a set risk level (high, medium, or low); you configure default risk actions for each risk level in a 
BlackBerry Intelligent Security
 policy. For example, you can define a geozone for a specific office location with a low risk level. If a user is in that geozone, their risk level will be low regardless of how far it is from their typical geozone. Note that the overall assessment of the user's geozone risk level is also impacted by the user's current behavioral risk assessment.
The 
BlackBerry Intelligent Security
 services retain user data for 30 days only (you can change the data retention period).