Kurt Shintaku's Blog

I was recently asked what the differences are between:

• Microsoft 365 E3 + Microsoft 365 E5 Security
• Microsoft 365 E5

FEATURE MATRIX
Here’s a pre-configured Feature Matrix from M365Maps that shows the differences between E3+E5Sec vs E5:

• https://m365maps.com/matrix.htm
  #000000000001101000000

LIST OF DIFFERENCES
For an outline of what all of these differences are, I’ve written them up for convenience sake:

• Compliance & Governance services
• Compliance Management
• Audit (Premium) – 1 year audit log retention, Premium-only Audit Events, High-bandwidth (2x) access to audit logs through O365 Mgmt APIs
  • Optional 10-year Audit Log Retention (only for E5)
• eDiscovery (Premium) – AI-accurate discovery & legal packaging
• Communications Compliance – Detection of regulatory compliance & business conduct violations
• Premium Compliance Manager Templates (3x ala carte) – Select 3 compliance templates from a catalog of 200+
• Data Lifecycle Management – Retain & delete broad groups of documents & data based on Enterprise policy
• Records Management – Provide specific retention & evidence of deletion on classified documents for compliance
• Message Encryption (Premium) – Restricting external recipient access to messages to meet compliance obligations
• Customer Key – Empowers own to submit & use their own encryption key for M365 services for compliance purposes
• Customer Lockbox – Ensures that Microsoft can’t access your content to do service operations without your explicit approval.
• Double Key Encryption – Uses two keys together to access select, protected content, one key held by Microsoft, the other key held by the instance owner. (Warning: Limits M365 functionality)
• Privileged Access Management for Office 365 – Allows granular access control over privileged admin tasks in Office 365 & protects against breaches that use admin accounts with standing access to sensitive data.
• Graph Access
• Built-in Graph Connector Quota Entitlement – 500 items/license of index quota, which counts towards ingesting content from Microsoft Graph connectors
• Built-in Graph Support for Teams DLP & Export – Real time API access to listen to Teams chats & export chats to 3rd party DLP solutions.
• Data Loss Prevention
  • Teams Data Loss Prevention – Chat-based monitoring & prevention of the sharing of sensitive information
  • Endpoint Data Loss Prevention – Prevents data from leaving laptops & desktops through USB or other means
  • Information Barriers – Restrict communications between two groups (depts) on SharePoint, Teams, Exchange, etc.
  • Insider Risk Management – Detect & prevent internal data leakage, security violations, IP theft, etc.
• Data Classification & Labelling
  • Rules-based Classification (Online) – Automatically apply labels in Office 365 based on policies
  • Rules-based Classification (On-prem) – Automatically apply labels in on-prem files & folders using a crawler
  • Exact Data Match Classification – Detect exact or nearly exact data values to identify classified information
  • AI-Trainable Classifiers – Identify classified content by training classifiers on 1000s of samples using machine learning
• Enterprise Data Analytics
  • Power BI Pro – Provide reports & dashboards against any data source
• Cloud-based Digital Telephony
• Teams Phone – Cloud-based call control & PBX services through Microsoft Teams
• Exclusive add-on: Calling Plans – Provides a primary phone number & calling minutes to make/receive calls.
• Exclusive add-on: Communications Credits – Provides usage if your org runs out of minutes & needs to continue to make calls or dial out from Audio Conferencing meetings.
• Exclusive add-on: Operator Connect – Provides PSTN connectivity with Teams Phone.
• Employee Performance Management
  • Viva Insights (Premium) – Data-driven visibility into how work patterns affect wellbeing, productivity & business performance.