The Total Economic Impact Of CylancePROTECT And CylanceOPTICS

Executive Summary Benefits And Costs Decommissioned on-premises legacy endpoint security software: $8.4 million PV Time savings from faster remediation: $3.3 million PV Total cost: $7.0 million PV Employee endpoints are the interfaces between employees and the corporate data and applications they need to do their jobs. Attackers understand this — and actively target employee endpoints as well as the server endpoints hosting corporate data. More than 50% of companies experience a significant data breach each year, and endpoints, as a critical conduit for valuable corporate data, are the top targets for attack.1 Endpoint security solutions provide a critical line of defense, protecting PCs, laptops, and servers from malicious threats. CylancePROTECT® and CylanceOPTICS™ provide an AI-driven threat prevention, detection, and response security solution that protects endpoints, servers, and cloud workloads. CylancePROTECT offers realtime predictive threat prevention and visibility into the endpoint environment, allowing cybersecurity teams to discover and stop potential threats before they propagate. CylanceOPTICS enables faster enterprisewide threat hunting; security teams can interrogate endpoints in seconds and store critical data for future investigations. BlackBerry Cylance commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study and examine the potential return on investment (ROI) enterprises may realize by deploying CylancePROTECT and CylanceOPTICS. The purpose of this study is to provide readers with a framework to evaluate the potential financial impact of the CylancePROTECT and CylanceOPTICS on their organizations. To better understand the benefits, costs, and risks associated with this investment, Forrester interviewed one representative customer currently using CylancePROTECT and CylanceOPTICS. The customer looked to BlackBerry Cylance for more robust threat protection and wanted an endpoint security solution that was lightweight, easy to deploy, and easy to manage. The customer added endpoint detection and response (EDR) capabilities to quickly alert the cybersecurity team to potential threats. Prior to using CylancePROTECT and CylanceOPTICS, the customer relied on a legacy on-premises endpoint security solution that did not have EDR capability. This solution required extensive manual workarounds and lacked real-time visibility into threats. Key Findings Quantified benefits. The interviewed organization experienced the following risk-adjusted present value (PV) quantified benefits: › Decommissioned legacy on-premises endpoint security solution, saving $8.4 million PV. The organization fully decommissioned its legacy on-premises endpoint security solution after deploying the BlackBerry Cylance software-as-a-service (SaaS) solution. › Improved cybersecurity team productivity by 10%. With BlackBerry Cylance, the cybersecurity team now proactively focuses on threat hunting and investigating more serious threats. Previously, the cybersecurity team spent time reactively troubleshooting and maintaining the legacy endpoint security solution. 1 | The Total Economic Impact™ Of CylancePROTECT® and CylanceOPTICS™ ROI 99% Benefits PV $14.0 million NPV $7.0 million › Reduced the expected cost of a major security breach by 25 percentage points with more effective malware detection and protection. BlackBerry Cylance uses AI to block potentially malicious applications and to stop attacks. The interviewee found BlackBerry Cylance to be more effective at threat blocking and protection versus the legacy endpoint security solution, minimizing the likelihood and potential cost of a major security breach. › Reduced lost time via faster investigation and remediation by 95%. With BlackBerry Cylance, fewer end users are compromised. Faster threat investigation and remediation allow end users to quickly resume productive work. › Cut machine reimaging by 97%. With BlackBerry Cylance, the interviewed organization takes fewer machines offline for reimaging. Less reimaging means less lost end user time and less IT time needed to reimage. › Eliminated manual software audits. With BlackBerry Cylance, the cybersecurity team has more control over employee software downloads. If an employee downloads software that could be malicious, BlackBerry Cylance sends an alert to the security team. The software is blocked, and the employee must ask for approval before running the software. This eliminates the need for manual software audits. Unquantified benefits. The interviewed organization experienced the following benefits, which are not quantified for this study: › Withstanding threats without cloud connection. The interviewee required endpoint security protection for multiple locations with varying levels of connectivity. Because the BlackBerry Cylance solution runs locally on the endpoint, security does not stop if the machine is not connected. › Decommissioning additional endpoint security tools. Forrester has quantified the benefit of decommissioning the legacy endpoint security system, but the customer also decommissioned several other endpoint protection tools deployed on an ad hoc basis by individual teams. This simplified the endpoint security stack. › Limiting the burden on system resources. Before BlackBerry Cylance, unauthorized software created machine performance issues. Costs. The interviewed organization experienced the following riskadjusted PV costs: › BlackBerry Cylance SaaS and service provider fees. The organization pays an annual fee to its service provider for a bundled solution, including the service provider fee and the CylancePROTECT and CylanceOPTICS SaaS fee. › Internal labor cost. While the service provider takes the lead in investigations and responding to alerts, the internal cybersecurity team devotes resources to manage and steer the service provider. › Internal labor installation cost. The cybersecurity team worked with the service provider to install and test CylancePROTECT and CylanceOPTICS. Forrester’s interview with an existing customer and subsequent financial analysis found that the interviewed organization experienced benefits of $14,047,030 over three years versus costs of $7,044,049, adding up to a net present value (NPV) of $7,002,981 and an ROI of 99%. 2 | The Total Economic Impact™ Of CylancePROTECT® and CylanceOPTICS™