Microsoft 365 Security and Compliance for Firstline Workers

What this plan gives you

Email & collaboration

Email archiving & retention Extra Exchange Online archive mailbox storage.

Threat protection

Defender for Cloud Apps Cloud access security broker (CASB).
Defender for Endpoint (Plan 2) Full endpoint detection and response (EDR).
Defender for Identity On-prem identity threat detection.
Defender for Office 365 (Plan 1) Safe Links / Safe Attachments for email and files.
Defender for Office 365 (Plan 2) Anti-phishing plus threat hunting and automation.
Microsoft 365 Defender (XDR) Unified incidents portal across Defender products.

Information protection & compliance

Advanced auditing Long-term, high-value audit events.
Communication compliance Detect policy violations in messages.
Customer Key Bring-your-own encryption keys.
Customer Lockbox Approve Microsoft support access to your data.
Data loss prevention (DLP) Prevent oversharing of sensitive information.
eDiscovery & investigations Legal hold, review, analytics and data investigations.
Information barriers Restrict communication between groups.
Information protection & encryption Rights management, sensitivity encryption and message encryption.
Privileged access management Just-in-time, task-level access approval.
Sensitivity labels & classification Auto-labelling and data classification.

Technical detail: the 24 underlying service plans

Service (friendly)	Internal name	Capability
AZURE INFORMATION PROTECTION PREMIUM P2	RMS_S_PREMIUM2	Information protection & encryption
Customer Lockbox	LOCKBOX_ENTERPRISE	Customer Lockbox
Data Classification in Microsoft 365	MIP_S_Exchange	Sensitivity labels & classification
Data Loss Prevention	BPOS_S_DlpAddOn	Data loss prevention (DLP)
EXCHANGE ONLINE ARCHIVING FOR EXCHANGE ONLINE	EXCHANGE_S_ARCHIVE_ADDON	Email archiving & retention
Information Barriers	INFORMATION_BARRIERS	Information barriers
Information Protection and Governance Analytics - Premium	Content_Explorer	Sensitivity labels & classification
Information Protection and Governance Analytics – Standard	ContentExplorer_Standard	Sensitivity labels & classification
Information Protection for Office 365 - Premium	MIP_S_CLP2	Sensitivity labels & classification
Microsoft 365 Advanced Auditing	M365_ADVANCED_AUDITING	Advanced auditing
Microsoft 365 Communication Compliance	MICROSOFT_COMMUNICATION_COMPLIANCE	Communication compliance
Microsoft 365 Defender	MTP	Microsoft 365 Defender (XDR)
MICROSOFT CLOUD APP SECURITY	ADALLOM_S_STANDALONE	Defender for Cloud Apps
Microsoft Communications DLP	COMMUNICATIONS_DLP	Data loss prevention (DLP)
Microsoft Customer Key	CUSTOMER_KEY	Customer Key
Microsoft Defender for Endpoint	WINDEFATP	Defender for Endpoint (Plan 2)
MICROSOFT DEFENDER FOR IDENTITY	ATA	Defender for Identity
Microsoft Defender for Office 365 (Plan 1)	ATP_ENTERPRISE	Defender for Office 365 (Plan 1)
Microsoft Defender for Office 365 (Plan 2)	THREAT_INTELLIGENCE	Defender for Office 365 (Plan 2)
Microsoft Endpoint DLP	MICROSOFTENDPOINTDLP	Data loss prevention (DLP)
Microsoft ML-Based Classification	ML_CLASSIFICATION	Sensitivity labels & classification
Office 365 Advanced eDiscovery	EQUIVIO_ANALYTICS	eDiscovery & investigations
Office 365 Privileged Access Management	PAM_ENTERPRISE	Privileged access management
Premium Encryption in Office 365	PREMIUM_ENCRYPTION	Information protection & encryption

At a glance

Everyday work

Business email —
Teams —
SharePoint & OneDrive —
Office apps —

Security & devices

Conditional access —
Device management —
Endpoint protection Plan 2
Email threat protection Plan 2

Compliance

Data loss prevention ✓
eDiscovery ✓
Insider risk —

Extras

Teams Phone —
Power BI Pro —
Windows Enterprise —