Microsoft 365 Email Security Features

Microsoft 365 Business Basic, Standard, and Premium all include antiphishing, antispam, and antimalware protection to protect your email online. Microsoft 365 Business Premium includes even more security capabilities, such as advanced cybersecurity protection for:

• Devices, such as computers, tablets, and phones (also referred to as endpoints)
• Email & collaboration content (such as Office documents)
• Data (encryption, sensitivity labels, and Data Loss Prevention)

There are many different security features that are included in Microsoft Office 365, some are paid extras but there are some free features  that you can use now.

Multi-factor authentication: 

(MFA), also known as two-step verification. See Turn on multi-factor authentication.

Conditional Access: 

If your company or business has complex security requirements or you need more granular control over your security policies, then you should consider using Conditional Access instead of security defaults to achieve a similar or higher security posture.

Conditional Access lets you create and define policies that react to sign-in events and request additional actions before a user is granted access to an application or service. Conditional Access policies can be granular and specific, empowering users to be productive wherever and whenever, but also protecting your organization.

Exchange Online Protection:

Exchange Online Protection (EOP) is the cloud-based filtering service that protects your organization against spam, malware, and other email threats. EOP is included in all Microsoft 365 organizations with Exchange Online mailboxes. 

• EOP uses several URL block lists that help detect known malicious links within messages.
• EOP uses a vast list of domains that are known to send spam.
• EOP uses multiple anti-malware engines help to automatically protect our customers.
• EOP inspects the active payload in the message body and all message attachments for malware.
• For recommended values for protection policies, see Recommended settings for EOP and Microsoft Defender for Office 365 security.
• For quick instructions to configure protection policies, see Protect against threats.

Advanced Threat Protection:

In a nutshell, Windows Defender ATP is a third-party anti-virus compatible cloud-based threat management and protection solution for Windows 10 that does not require the deployment of agents.

• Strengthen email security without compromise. ...
• Get comprehensive security for collaboration tools. ...
• Enhance security with industry-leading AI and automation. ...
• Defend against advanced attacks with XDR.
  
  

Data Loss Prevention:

Data loss prevention is a security solution that identifies and helps prevent unsafe or inappropriate sharing, transfer, or use of sensitive data. It can help your organization monitor and protect sensitive information across on-premises systems, cloud-based locations, and endpoint devices. DLP helps protect your sensitive information with a default policy. This default policy and its recommendation help keep your sensitive content secure by notifying you when email or documents containing a credit card number are shared with someone outside your organization. 

Impossible Travel:

This detection identifies two user activities originating from geographically distant locations within a time period shorter than the time it would have taken the user to travel from the first location to the second, indicating that a different user is using the same credentials. So if someone in Germany is trying to access your email after you signed on 2 hours prior, Microsoft will block the sign in.

These are just a few of the advanced Office 365 security features that help lock down your email. For more information or to find out how to implement these features, contact us. We are Microsoft 365 experts and certified partners.