POLARITY User Guide

POLARITY by BRITECITY provides multiple layered cybersecurity services to offer you greater defense against the many digital threats we face today. This guide explains how each component works and what you need to know as a user.

1. Next-Gen Antivirus - SentinelOne

SentinelOne is a security solution that not only blocks malicious files, but can recognize and block suspicious computer activity. The system allows remote isolation of infected machines and includes rollback capabilities.

How to Check Your Protection Status

Look for the SentinelOne icon in your system tray (bottom-right of your screen on Windows, top menu bar on Mac). The icon color indicates your protection status:

• Green: Fully protected
• Yellow: Action required
• Red: Protection issue - contact support

What Happens When a Threat is Detected

When SentinelOne detects a threat, it automatically:

1. Blocks the malicious activity
2. Quarantines the affected files
3. Alerts our security team for review
4. Can roll back any damage if necessary

You may see a notification pop-up, but no action is typically required on your part. Our team monitors all alerts and will contact you if needed.

2. Prevention & Content Filtering - Cisco Umbrella

Cisco Umbrella DNS Filtering prevents unsafe content access by filtering at the DNS level. This service operates invisibly across corporate networks and remote devices.

What Happens When Content is Blocked

When you attempt to access a blocked website, you will see a BRITECITY block page with an explanation of why it was blocked. The page will indicate the category (e.g., malware, phishing, adult content) and provide options to:

• Request access if you believe the block is incorrect
• Contact support for assistance
• Navigate away from the blocked content

Categories of Blocked Content

• Known malware and phishing sites
• Cryptomining sites
• Adult and inappropriate content
• Other security risks as configured by your organization

3. ThreatLocker - Application Allowlisting

ThreatLocker effectively blocks everything except authorized programs. This prevents unauthorized software, scripts, and potentially malicious applications from running.

Learning Mode vs. Protect Mode

When first deployed, ThreatLocker operates in Learning Mode for 1-2 months. During this time, it learns which applications you normally use. After configuration, it transitions to Protect Mode where only approved applications can run.

What Happens When an Application is Blocked

If you try to run an unapproved application, you will see a ThreatLocker notification. Options include:

• Request Approval: Submit a request to allow the application
• Cancel: Don't run the application

Requests are reviewed by our security team. Legitimate business applications are typically approved within hours during business hours.

4. User Awareness Training - BreachSecureNow

BreachSecureNow provides phishing email tests, weekly training, and dark web monitoring to help protect against human error, which accounts for 92% of data breaches.

Phishing Tests

You will periodically receive simulated phishing emails. These are tests to help train your ability to recognize real phishing attempts. If you click on a simulated phishing link, you will be redirected to a training page.

The Catch Phish Outlook Plug-in

For Office 365 users, the Catch Phish plug-in allows you to analyze suspicious emails. When you receive an email you are unsure about:

1. Click the Catch Phish button in your Outlook ribbon
2. The email will be analyzed for phishing indicators
3. You will receive feedback on whether the email is likely safe or suspicious

Weekly Training

You will receive brief weekly security training modules. These typically take 2-3 minutes to complete and cover topics like:

• Recognizing phishing emails
• Password best practices
• Safe web browsing
• Social engineering awareness

Dark Web Monitoring

BreachSecureNow continuously scans the dark web for compromised employee credentials. If your work email or credentials appear in a breach, you will be notified and prompted to change your password.

Need Help?

If you encounter issues with any POLARITY component or have questions about security alerts:

• Phone: 949-243-7440
• Email: Submit a support ticket
• Emergency: Call immediately for security incidents

For more detailed information about each security component, visit:

• SentinelOne Documentation
• Cisco Umbrella Documentation
• ThreatLocker Documentation
• BreachSecureNow Documentation