On April 21, 2020, Microsoft rebranded it’s small and medium business Office 365 products to Microsoft 365. This resulted in a name change for the popular Microsoft 365 Business product as well, which is now called Microsoft 365 Business Premium.
|Previously called||Now called||What it has|
|Office 365 Business Essentials||Microsoft 365 Business Basic||Cloud Services|
|Office 365 Business Premium||Microsoft 365 Business Standard||Cloud services and desktop apps|
|Microsoft 365 Business||Microsoft 365 Business Premium||Cloud services, desktop apps and advanced security|
We’ve been advocates of Microsoft 365 Business Premium for a while now. We believe it’s the best value Microsoft 365 product around for businesses with under 300 users.
So why do we think you should go with Microsoft 365 Business Premium over Basic or Standard?
For us, it comes down to the Microsoft 365 Business Premium’s advanced security and compliance features.
Security and Compliance features of Microsoft 365 Business Premium
Microsoft 365 Business Premium includes advanced security features that are not present in the lower tier plans. These include:
Malware and Phishing protection with Office 365 Advanced Threat Protection
Microsoft 365 Safe Links and Safe Attachment policies protect against known and zero-day malware. Anti-Phishing policies protect users against phishing attacks using mailbox intelligence and machine-learning enhanced sender reputation checks.
Enhanced security for identities with Conditional Access
Conditional Access policies help balance security and productivity by applying the right security measures at the right time. For instance, if Microsoft 365 detects a risky sign-in from an unexpected location or non-compliant device, it can prompt for multi-factor authentication or block access to the user.
Enforce encryption on devices using Microsoft Intune
We can use Microsoft Intune to protect data on devices in the event of loss or theft. Microsoft Intune can configure Windows BitLocker, Apple’s File Vault, and encryption settings on Android and iOS devices.
Classify and protect confidential information with Azure Information Protection
Azure information protection helps companies use sensitivity labels and policies to classify and protect data. Built-in labels include Personal, Public, General, Confidential and Highly Confidential.
Depending on what label is applied, a policy can be used to protect it. These policies can enforce encryption, apply watermarks, prevent it from leaving your organisation and more.
Control company data on PCs with Windows Information protection
Many people use the same computer for both work and personal tasks. Windows Information protection tags files as ‘Work’ if they are generated by, or saved from, a corporate app. Files tagged as ‘Work’ are subject to the controls defined in your Information Protection policies. These files can:
- be encrypted
- prevented from being uploaded or shared via unmanaged apps
- remotely wiped without affecting personal data.
Control access to sensitive emails with Information Rights Management
Information Rights Management allows your team to apply restrictions like “Do Not Copy” for specific documents and emails. When a recipient receives the email or document, they’ll be unable to forward, save, print or copy it.
Prevent sharing of sensitive info with Data Loss Prevention
Data Loss Prevention policies monitor the types of data that are uploaded to and shared outside your company. This info could be tax file numbers, credit card information, drivers license details and many more. When sensitive information is detected, the Data Loss Prevention policy can encrypt the message, notify the sender, alert an admin or block the message from being sent or file uploaded.
Remotely wipe company data and enforce security on devices with Microsoft Intune
Microsoft Intune lets us enforce security requirements on the devices that access company data. These could include requiring a strong password and encryption on phones and only allowing access via company-approved apps. When employees leave the company, Microsoft 365 can remotely wipe company data from the device without affecting personal info.
Unlimited archive for email
Microsoft 365 Business Premium provides practically unlimited storage for your email. Alongside the standard 50GB mailbox, users can access an unlimited archive of their email in Outlook.
Want to enable advanced security in Microsoft 365 Business Premium?
While you get all the above features with Microsoft 365 Business Premium, you still need to configure them to suit your business and requirements. You can outsource the security of your cloud environment to GCITS. Get in touch for an expert assessment, and we can ensure the ongoing state management of these essential security policies.