Microsoft 365 E5 Security, Business Premium add on

The evolving threat landscape presents ongoing challenges for SMBs with increased regulations and cyberinsurance requirements. Microsoft 365 Business Premium now offers core security solutions to help safeguard data, defend against cyberthreats, and manage access and devices. To address the increasing volume and sophistication of attacks, Microsoft has now made available to Business Premium customers the ability to purchase Microsoft 365 E5 Security as an add-on for enhanced protection. 

E5 Security brings new security value on top of Business Premium with Microsoft Entra ID Plan 2, Microsoft Defender for Identity, Microsoft Defender for Endpoint Plan 2, Microsoft Defender for Office 365 Plan 2, and Microsoft Defender for Cloud Apps.

Products included in Microsoft 365 E5 Security

Identity and access controls

Business Premium includes Microsoft Entra ID P1, which provides single sign-on, multi-factor authentication (MFA), and conditional access to help small and medium-sized businesses (SMBs) manage user identities and grant access to applications and resources from trusted users, devices, and locations. Microsoft Entra ID P2 offers advanced security and governance features, including Microsoft Entra ID Protection and Microsoft Entra ID Governance.

Microsoft Entra ID Protection uses risk-based conditional access to block identity attacks in real-time with behavioral analytics and signals from both user risk and sign-in risk. It also allows SMBs to detect, investigate, and address potential identity-based risks using advanced machine learning and anomaly detection capabilities. Detailed reports and alerts notify businesses of suspicious user activities and sign-in attempts, such as password-spray attacks where attackers try commonly used passwords across many different accounts.

ID Governance capabilities automate workflows and processes for granting users access to resources. Traditionally, IT administrators handle the onboarding process manually and generate repetitive user access requests for managers to review, which is time-consuming and inefficient. With ID Governance capabilities, pre-configured workflows automate employee onboarding, user access, and lifecycle management, streamlining the process and reducing onboarding time.

Extended Detection and Response (XDR)

Microsoft Defender XDR provides a comprehensive and streamlined method for achieving incident-level visibility throughout the attack lifecycle. The combination of XDR and exposure management (XSPM) integrates various isolated security solutions, delivering superior capabilities across identities, endpoints, applications, and email.

Identity threat detection and response (ITDR)

Identities are a common attack vector, making threat detection and response crucial for your business. Microsoft Defender for Identity uses sensors and connectors to monitor and protect your identity landscape, providing detailed recommendations and robust response actions. These detections are enriched and correlated with other data in Defender XDR for comprehensive incident visibility.

Device security

Microsoft Defender for Business (MDB) offers device protection features to Business Premium customers on Windows, MacOS, iOS, and Android devices. It includes vulnerability management, next-generation antivirus protection, AI-powered endpoint detection and response with automatic attack disruption, and automated investigation and remediation. With streaming APIs, users and partners can develop Managed Detection and Response (MDR) services using Defender for Business. For those requiring advanced hunting capabilities, Microsoft Defender for Endpoint P2 provides advanced hunting features, 6 months of data retention on the device, and endpoint security for IoT devices.

Email and Collaboration security

Microsoft Defender for Office 365 P1 in Business Premium includes SafeLinks, safe attachments, and phishing and malware defense across email, Teams, OneDrive, and SharePoint. It also features AI-powered threat protection with high accuracy. Defender for Office 365 P2 adds cyber-attack simulation training, automated response capabilities, and post-breach investigations. Detailed reports capture information on employees' URL clicks and email distribution.

Software-as-a-service (SaaS) security

Microsoft Defender for Cloud Apps is an AI-powered software-as-a-service (SaaS) security solution designed to help IT teams identify and manage shadow IT. It ensures that only approved applications are used and provides protection against SaaS-based attacks, OAuth attacks, and interactions with GenAI apps. The solution includes SaaS app discovery, security posture management, app-to-app protection, and integrated threat protection. IT teams can gain visibility into their SaaS app landscape, understand risks, and establish controls to manage applications. SaaS security posture management helps identify app misconfigurations and offers remediation actions to reduce the attack surface.

E5 Security offers cost-effective protection for SMBs. Purchasing E5 Security saves 57% compared to buying the included products individually.

The below graphic is in American Freedom dollars but for the Australian region you would be looking at around $19.80 inc GST