If you've been following the news, you'll know cyberattacks are becoming more sophisticated thanks to AI. Nevertheless, that doesn't mean "old-school" cybercrime such as phishing is becoming less common.
To counter this development - and the danger it poses to businesses of all sizes - Microsoft is now offering the Microsoft Defender Suite and Microsoft Purview Suite as an add-on for Microsoft 365 Business Premium customers, basically offering enterprise-grade security solutions at an SMB-friendly price.
In this article, we're looking at why this offering came about in the first place and what's included in Microsoft 365 Business Premium as standard.
Discover how cloud-based advanced threat protection for Microsoft 365 is transforming cybersecurity in your industry, safeguarding sensitive operations and intellectual property from modern attacks.
Attacks on major retailers such as M&S, Co-Op and JLR have certainly raised awareness for upgraded cybersecurity, although many would argue that these businesses are much bigger than theirs. Still, according to Microsoft's 2024 SMB Cybersecurity Report, 1 in 3 SMBs have experienced a cyberattack. Just in the UK, we have roughly 5.5 million SMBs which make up the majority of the business landscape. Many of our customers are small and medium-sized businesses (SMB). Not last the cyberattack on Knights of Old which was subject of our Microsoft 365-focused webinar has sparked conversations with them how we could implement even stricter safeguards - and also disaster recovery, but that's a topic for another day.
How Are Cyberthreats Changing the Way We Have to Think?
With phishing still being a prevalent problem that leads to data breaches, hybrid work arrangements now normal and AI making it even easier for cybercriminals to find a way into your organisation, it's time to rethink cybersecurity.
Threat actors are now targeting operational technology (OT) environments alongside traditional IT infrastructure as a way to compromise sensitive intellectual property, disrupt supply chains, and exploit vulnerable endpoints. Ransomware, phishing, and identity-based attacks are now highly sophisticated, and often use automation and AI to bypass perimeter defences.
Let's look at an example: Have you ever heard of zero-click attacks? Zero-click means you don't even have to do anything. Case in point: Someone sends you an email with hidden instructions for Copilot to share transcripts from your latest Teams meetings. While this scenario hasn't actually happened, it could have - if Microsoft hadn't fixed the problem, as outlined in this article. But this is only the tip of the iceberg, as criminals will exploit weaknesses - especially where AI agents have access to valuable company information. But it could also be as simple as your staff sharing sensitive company information with AI tools - how do you keep track of that?
As businesses like yours accelerate digital transformation and adopt cloud-first strategies, the attack surface expands, introducing new vectors for cyberthreats. Regulatory expectations around data protection and compliance have also intensified, making robust, adaptive security essential for sustained business operations and resilience.
Why Microsoft 365 Needs Advanced Threat Protection for Industrial Environments
Manufacturing environments for example have unique cybersecurity requirements due to the convergence of IT and OT systems. Traditional security solutions often lack the depth to protect against lateral movement or targeted attacks on critical production assets. Microsoft 365, as a core productivity and collaboration suite, is increasingly integral to operational workflows and holds sensitive design and process data.
"I Thought We Were Already Secure with Microsoft 365"
We can already hear you asking "Do I really need another licence for Microsoft services?" - which is totally understandable. If you're reading this and wondering why on earth you should spend even more money on Microsoft 365 related apps and services, let's reflect on what's included in your subscription from a security perspective.
If your business holds a Microsoft 365 Business Premium licence, you're already benefiting from Microsoft Defender, Microsoft Entra ID P1, and Intune device management for up to 300 users - the following below:
- Advanced identity and access management with Microsoft Entra ID (P1)
- Personal and secure way to sign in to devices with Windows Hello for Business
- Secure remote desktop and application experiences with Azure Virtual Desktop
- Endpoint management across devices with Intune (P1)
- Integrated cyberthreat protection for email and collaboration tools with Microsoft Defender for Office 365 (P1)
- Cyberthreat protection against viruses and phishing with Microsoft Defender for Business
- Intelligent detection and control of sensitive information with Microsoft Purview Data Loss Protection (emails and files)
- Discovery and protection of sensitive data with Microsoft Purview Information Protection (P1)
- Ability to log and search for audited activities with Microsoft Purview Audit
This is a great start for basic cybersecurity, but unfortunately, the threats are evolving and there's a real need to be proactive with the ability to respond dynamically rather than reactively. That's what Microsoft's Advanced Threat Protection package for SMBs = enterprise grade protection at SMB prices - is all about.
Microsoft 365 Business Premium Security Add-Ons
So, what's on offer?
Defender Suite for Business Premium - £8.09/user/month, focused on preventing and detecting attacks across identity, endpoints, email and SaaS.
Purview Suite for Business Premium - £8.09/user/month, focused on data protection, insider risk and compliance.
Combined Defender and Purview Suites - £12.08/user/month, both in one SKU with up to 68% saving versus subscribing to all products separately.
(Prices based on annual subscription with monthly billing.)
If you're interested in how to find out which one's right for you - check out our next blog post which we'll publish tomorrow.
