The main option for them is to become smaller, and to do one thing well. Their perceived strengths are mobile messaging (BBM) and "security". If they became a software only company then they would be at the mercy of their (fickle) partners to get it deployed. When they are playing the hardware game then there is ferocious competition and you have to do a full software stack (proprietary or adapting Android/WinMo).
In their position I would do exactly one hardware device that is a best of breed, adapt Android for it and have a layer of BBM/security on top. I'd try to get the BBM/security licensed by as many manufacturers as possible and use the own hardware as a showcase. Eventually the hope would be to get out of the hardware business - it exists purely to ensure there is at least one way to market.
There is so much to be done on the communication side with lots of half assed solutions. On the security side consider running an IT department or being a consumer and a device is stolen. Now list what sensitive information was on the device.
I proposed this to a RIM BD exec about 2 years ago, but he insisted it would be throwing away way too much of RIM's investment in secure kernels.
But in my mind, the battle was already lost: even most biz users aren't choosing a device based on the nth degree of security. If anything, they love the keyboard.
And for the small niche that truly needs security, RIM could keep one or two BBOS models alive.
Maybe they could still pull off such a strategy?
In a certain sense they are the old reliable Nokias of yesteryear.
I don't pretend to play analyst, but I think there's a huge market in producing affordable and sturdy smartphones for third world countries. To many it's their only way to get online.