That’s very good - you can configure cis that it fits as you want. And that is a feature which stops malicous software before it can harm your PC or steal data.
More difficult is setting HIPS to paranoid, it’s not handable for me. But the possibilites of setting containment-rules really is a superb feature along with some others.