Here are detailed information about it:
Usually, EOP is enough. If you want to a more safer environment, you could buy ATP for your organization.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.