Skip to content
Menu
ChrisOnSecurity
  • Blog
  • Microsoft Security portals
  • Presentations
  • GitHub
  • About me
  • Impressum
  • Disclaimer
ChrisOnSecurity

New Microsoft licenses: Microsoft 365 Security & Compliance

Posted on 3. January 201916. August 2019

Yep, there’s Microsoft 365 E5 with all its security features. However, most companies are hesitant to choose this license mainly due to financial reasons. Luckily, Microsoft just announced new packages that include the most useful security tools at lesser cost: Microsoft 365 E5 Security & Microsoft 365 E5 Compliance.

However, please keep in mind that it often depends on your purchasing department and licensing partner when it comes to actual prices. So, I can’t give you guidance on that.

For technical guidance, please visit my security baseline posts about Microsoft 365 E3 and Microsoft 365 E5.

Microsoft 365 E5 Security (Identity & Threat Protection)

The focus of this package is to put the most useful and popular security features of Office 365, Windows 10, and Enterprise Mobility + Security into a single license. It includes:

  • Azure Advanced Threat Protection
  • Microsoft Defender Advanced Threat Protection
  • Office 365 Advanced Threat Protection including Threat Intelligence
  • Microsoft Cloud App Security
  • Azure Active Directory Premium P2

Pricing: $12 per user per month

Microsoft 365 E5 Compliance (Information Protection & Compliance)

This package focuses on advanced compliance controls, including:

  • Office 365 Advanced Compliance
    • Advanced eDiscovery (collecting data for legal cases)
    • Advanced Data Governance (retention and deletion policies)
    • Customer Lockbox: approve or reject access by Microsoft support personnel
    • Office 365 Privileged Access Management
    • Customer Key: provide and control the encryption keys for your Office 365 data
  • Azure Information Protection P2

Pricing: $10 per user per month

The downside

Unfortunately, the prices mentioned above only apply to Microsoft 365 E3 customers. It is hard to say how much you can save as enterprise licensing costs may vary depending on your licensing conditions.

If you only want to add more security & compliance solutions to your existing Microsoft 365 E3 license adding Microsoft 365 E5 Security and Microsoft 365 E5 Compliance will be a bit cheaper than the full-blown M365 E5 license. As always, choosing the right license can be as tricky as working on a challenging technical problem. 😉

Recommendations

When I talk to customers about Microsoft Cloud Security it often turns out that they have already been using Office 365 for a few years without taking security into consideration. Often because most features must be licensed separately. This can never be an ideal condition if you think about identities and cloud services being the new perimeter and control plane, which they certainly are. So, I really appreciate every change that makes it easier (and cheaper) to use Microsoft Threat Protection and other features to protect identities like Azure AD PIM and Azure AD Identity Protection.

Microsoft 365 E5 Security (Identity & Threat Protection): From my point of view this is the most interesting offering of the two. It includes all important security features. I highly recommend using all of them no matter which licenses you use to get them.

Microsoft 365 E5 Compliance (Information Protection & Compliance): If you deal with compliance on a regular basis and you want to use automatic classification functionality with Azure Information Protection P2 this package might be interesting.

Leaving these new packages aside: Protect your identities, data, devices, and services in this cloud-first Microsoft world! Microsoft offers all tools you need for that.

Thanks for reading!

Chris

@ChrisOnSecurity@infosec.exchange

Recent posts

  • What’s new: Microsoft 365 Security & Compliance December 2022
  • What’s new: Microsoft 365 Security & Compliance November 2022
  • Counter MFA spam attacks with Azure Active Directory
  • Windows 11 security – a first look
  • Conditional Access – device identification using certificates

@ChrisOnSecurity

Tweets by ChrisOnSecurity

Recent posts

  • What’s new: Microsoft 365 Security & Compliance December 2022
  • What’s new: Microsoft 365 Security & Compliance November 2022
  • Counter MFA spam attacks with Azure Active Directory
  • Windows 11 security – a first look
  • Conditional Access – device identification using certificates

Tags

Administration Administrative Units Android AV Azure Active Directory Azure AD Azure Sentinel Client Security Conditional Access Conditional Access App Control Defender ATP Delegation EDR EMS Enterprise Mobility + Security Identity Protection Information Protection & Compliance Linux M365 M365 E3 Mail Security MCAS MDAPT MDATP MFA Microsoft 365 Microsoft 365 E3 Microsoft 365 Security Microsoft Cloud App Security Microsoft Defender ATP Microsoft Ignite Mobile Security Monitoring Network Control Office 365 Office ATP passwordless Perimeter Security Baseline Session Control Sysmon Unified Incidents User submissions Web Content Filtering Windows 10 Enterprise
©2023 ChrisOnSecurity | WordPress Theme by Superbthemes.com
We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.
Cookie settingsACCEPT
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT