Microsoft 365 Cloud Security
Secure Microsoft 365 email, collaboration, identities and information with connected cloud controls and ongoing oversight.
Microsoft 365 Security Works Best as One Connected System
Exchange Online, Teams, SharePoint, OneDrive, Microsoft Entra and Microsoft Copilot share identities, permissions and information. ITFR aligns controls across the environment so cloud security does not depend on disconnected settings or one-off reviews.
✓Identity foundations
Coordinate authentication, conditional access, privileged roles and secure user access.
✓Email and collaboration protection
Reduce malicious email, unsafe links, impersonation and risky collaboration activity.
✓Sharing and permissions
Review internal and external access across Teams, SharePoint and OneDrive.
✓Information protection
Apply sensitivity, retention and data loss prevention controls where required.
✓Cloud monitoring and response
Review relevant alerts, risky activity and configuration issues across Microsoft 365.
✓Copilot and AI readiness
Reduce oversharing and improve information governance before broader AI adoption.
The result: Microsoft 365 collaboration that remains useful while identity, information and cloud risk are managed together.
Benefits at a glance
Safer Collaboration
Reduced Data Exposure
Stronger Cloud Visibility
Copilot Ready Security
SECURE IT · MICROSOFT 365 CLOUD SECURITY
Choose Your Level of Cloud Security
Protect your Microsoft 365 environment, identities, email and business data with security that grows with your requirements.
Microsoft 365 Cloud Security
Essential
$21.95/user/month
PROTECT
Core Microsoft 365 identity and email protection.
- Included: MFA ManagementMulti-Factor Authentication (MFA) ManagementMulti-factor authentication adds an identity check beyond a password, such as an authenticator approval.
- Included: Account Takeover ProtectionControls help detect or reduce unauthorised access to business accounts. Protection depends on the agreed identity and email configuration.
- Included: Sign-In & Identity MonitoringSuspicious Sign-In & Identity Threat Monitoring
- Included: Email Impersonation & Spoofing ProtectionImpersonation makes a message appear to come from a trusted sender. Controls help identify suspicious sender identities and messages.
- Included: Spam, Malicious Link & Attachment ProtectionFilters help identify unwanted messages and potentially harmful links or attachments; no filter detects every threat.
- Included: SPF & DKIM Email AuthenticationSPF identifies authorised email senders. DKIM adds a signature that helps receiving systems check the message.
- Included: Business Email Compromise (BEC) ProtectionBusiness Email Compromise is fraud using a compromised or impersonated business email account.
BEST FOR
Businesses that need a strong Microsoft 365 security baseline.
Microsoft 365 Cloud Security
Core
$27.95/user/month
PROTECT + RECOVER
Protection with Microsoft 365 backup and recovery.
- Included: Everything in EssentialIncludes the features listed in the Essential tier of this table, plus the additional inclusions shown here.
- Included: Microsoft 365 Data BackupBackup keeps a recoverable copy of the covered data. Scope, retention and restoration arrangements depend on the selected service.
- Included: Email ArchivingKeeps a searchable archive of email according to configured retention rules. Archiving and backup serve different purposes.
- Included: Teams, SharePoint & OneDrive SecurityReviews protection and access settings for collaboration and shared information in the covered Microsoft 365 services.
BEST FOR
Businesses that need stronger protection plus reliable backup and recovery.
Microsoft 365 Cloud Security
Premium
$39.95/user/month
PROTECT + RECOVER + GOVERN
Advanced identity, governance and user-risk protection.
- Included: Everything in CoreIncludes the features listed in the Core tier of this table, plus the additional inclusions shown here.
- Included: Conditional Access Management†Access rules can use identity, device status and sign-in conditions. Availability depends on the applicable Microsoft licences.
- Included: Privileged & Admin Account Security†Privileged accounts have elevated permissions. Controls help restrict and review their use.
- Included: Identity Security & Configuration Reviews†Reviews account and identity settings, access controls and relevant configuration.
- Included: Security Awareness TrainingPractical learning helps staff recognise security risks and respond appropriately. Topics and frequency depend on the programme.
- Included: Phishing SimulationsPhishing attempts trick people into sharing information or taking unsafe actions. Simulations use controlled examples for learning.
- Included: DMARC Email Authentication ManagementDMARC builds on SPF and DKIM to define how unauthenticated email should be handled and provide reporting.
- Included: Security Governance & Policy ReviewsReviews agreed security policies, ownership and improvement actions as business requirements change.
- Included: Incident Response & Recovery PlanningPlans roles, escalation and recovery arrangements for an incident; the agreed scope determines implementation and testing.
BEST FOR
Businesses with higher-risk users, sensitive information or greater governance needs.
Use the arrows or swipe sideways to view every plan.
† Requires suitable Microsoft licensing and configuration. Pricing is per user, per month and may vary with scope and licensing requirements.
One Microsoft 365 Environment, Different Risk Levels
Sensitive teams, external collaborators, administrators and Microsoft Copilot users may require different policies and oversight.
ITFR can combine tenant-wide foundations with targeted identity, email, endpoint and information controls.
You apply stronger controls where access, data and business impact require them.
COMMON QUESTIONS
Your Microsoft 365 security questions, answered
Can you review our existing Microsoft 365 security settings?
Yes. A tenant review can identify configuration, identity, collaboration and information risks, then prioritise improvements according to the agreed scope.
Do we need additional Microsoft licences?
Available controls depend partly on licensing. ITFR can review your current subscriptions and explain which improvements use existing capabilities and which may require additional licences.
Does Microsoft 365 security include independent backup?
Security controls and independent backup address different needs. Backup coverage, retention and restoration requirements should be agreed separately and can be coordinated with Microsoft 365 Backup.
Can you help prepare for Copilot?
ITFR can review permissions, sharing, ownership and sensitive information exposure before wider Copilot use. AI & Data Protection provides a focused pathway for readiness and information safeguards.
Can we choose a focused uplift or ongoing management?
Yes. A defined remediation project or an agreed recurring security service can be scoped around your users, information and risk. Responsibilities and reporting are confirmed in the engagement.
READY TO GET STARTED?
Strengthen the security of your Microsoft 365 environment
Talk to us about your users, information and the security controls that need attention.
