Overview of Microsoft 365 Business

What is Microsoft 365 Business

Microsoft 365 Business is a subscription service that includes Office 365 productivity tools plus advanced capabilities to help protect your business against cyberthreats, protect your data, and manage the devices.

Microsoft 365 Business is meant for up to 300 licenses, if you need more licenses, see Microsoft 365 Enterprise documentation for more information.

See Microsoft 365 Business service description for the entire list of features.

Small business security needs

Your business data can be compromised in many ways. You and your users can compromise your organization's security when you sign in with compromised credentials or view organization data on different devices and applications. More specifically, your organization is at risk from:

  1. Compromised or weak sign-in credentials.
  2. Compromised device with a weak pin, or a user owned device.
  3. Users who can copy/paste/save your organization's data to personal apps​.
  4. Users who install and use 3rd party apps with weak security​.
  5. Email vulnerabilities including sharing sensitive data, phishing attempts, malware, etc.
  6. When people who should not, can access documents with sensitive information.

Microsoft 365 Business helps safeguard your data in each of these instances. The security features that protect your business data are detailed in the following figure.

A figure that shows how M365B protects your business.

How your data and devices are protected

Microsoft 365 Business helps defended against threats by:

Scanning any links in emails and documents in real time to block unsafe web sites (ATP Safe Links).

  • Performing advanced analysis of email attachments in a sandbox environment to detect newly developed malware (ATP Safe Attachments).

  • Enabling anti-phishing policies that use machine learning models and impersonation detection to provide protection against advanced attacks (ATP anti-phishing intelligence).

  • Setting up advanced policies that disable access from untrusted locations or bypass multifactor authentication from trusted places such as your office network (Azure MFA including trusted IPs, and Conditional Access).

  • Enforcing malware protection across all your company’s Windows 10 devices and protecting files in key system folders from changes made by ransomware (Windows Defender)

Your business data is protected by:

  • Using automatic detection to help prevent sensitive information such as social security numbers or credit cards from leaking outside your business (Data Loss Prevention).

  • Encrypting sensitive emails so you can communicate securely with customers or other people outside your company, ensuring that only the intended recipient can read the message (Office 365 Message Encryption).

  • Controlling who has access to company information by applying restrictions such as Do Not Copy and Do Not Forward to email and documents (Azure Information Protection, Plan 1).

  • Enabling unlimited cloud archiving so you can retain all your businesses’ email, including the mailboxes of former employees (Exchange Online Archiving).

Your devices are secured by:

  • Controlling which devices and users can access your Office 365 data; with options to block users from logging in from home computers, un-approved apps, or outside of work hours (Conditional Access).

  • Applying security policies to protect business data on iOS and Android devices. For example, you can require users to provide a PIN or fingerprint to access business data, and encrypt data on mobile devices (App protection for Office mobile apps).

  • Keeping business documents, emails, and other data within approved Office mobile apps and preventing employees from saving these to unauthorized apps and locations (App protection for Office mobile apps).

  • Remotely wiping business data from lost or stolen devices without affecting personal information (Intune selective wipe).

  • Using simplified controls to manage policies for all the Windows 10 PCs in your company, enforcing BitLocker encryption and automatically installing critical Windows updates (Enforce Windows update policies).

To see the full list of security features, see Microsoft 365 Business security features. After you Set up Microsoft 365 Business, see Set up advanced security policies to get started with the security features that are not included as a part of the guided setup. Read also Top 10 ways to secure Office 365 and Microsoft 365 Business plans for a good overview on how to set up protections against cyber criminals and hackers.

Get Microsoft 365 Business