Enterprise Mobility + Security (EMS)

Microsoft’s threat detection comes in two versions: Advanced Threat Analytics for on-premise and Azure Advanced Threat Protection for the cloud. Using machine learning, these solutions learn, analyse and detect suspicious activity, alert you if anything unusual is happening on your network and provides recommended next steps.

Azure Active Directory is a cloud-based directory and identity management service that unifies user accounts for improved security and management. This allows single sign-on (SSO) for staff across their Microsoft and third-party services, which removes the need to continually login, as well as allowing self-service password reset (SSPR).

InTune provides mobile device management to allow you to securely manage your mobile devices. Features include the ability to enforce policies across all devices, classify personal and work applications and allow remote device wiping. Windows Autopilot also gives you the ability to remotely build or reset Windows 10 devices to greatly save time and costs and help staff get back up and running without needing to send equipment back.

Azure Information Protection gives advanced data protection by allowing you to classify your documents, such as Public, Confidential, or Highly Confidential, and apply rules based on these categorizations to control your documents. For example, Confidential documents cannot be emailed or printed, or can only be emailed if approved by a manager.