Skip Navigation

Create a risk assessment policy

A risk assessment policy maps the alerts that are detected by the
CylancePROTECT Mobile
app to risk levels (for example, you can specify that compromised devices should be treated as high risk). The risk levels of the alerts are used to determine a mobile device's overall risk level. You can view the device risk level in the management console (Assets > Mobile Devices and in the device details).
If you don’t create a risk assessment policy, a default policy is applied to users in your tenant. You can edit the default policy, but you cannot delete it.
Risk assessment policies can be used for the following
Cylance Endpoint Security
features:
  1. In the management console, on the menu bar, click
    Policies > User Policy
    .
  2. Click the
    Risk Assessment
    tab.
  3. Click
    Add Policy
    .
  4. Type a name and description for the policy.
  5. In the
    Risk Assessment
    section, click
    Add Detections > Detections
    .
  6. Drag and drop the detections to the risk level that you want to apply to them.
    For information about the detections, see Key features of CylancePROTECT Mobile.
  7. Click
    Add
    .