PLAN 2 - Compliant Endpoints

• Includes Everything in Plan 1
• With Microsoft Defender for Business, you can discover weaknesses that pose the most urgent risk to your business and prioritize and remediate software vulnerabilities and misconfigurations.
• Simplify app management by distributing and updating apps from your private app store through Microsoft Intune.
• Remotely manage users and devices, including devices owned by your organization and personally owned devices.
• Deployment of the following Security Benchmarks: CIS Microsoft 365 Foundation + CIS Microsoft Intune for Windows + CIS Microsoft Intune for Office + CIS Apple iOS and iPadOS for Intune + CIS Google Chrome + CIS Microsoft Edge + Android Enterprise.
• WITH OPTIONAL: Conditional Access and Privileged Identity Management Deployment
• Automate access-control decisions for accessing cloud apps based on conditions with Microsoft Entra ID Conditional Access.
• With Microsoft Privileged Identity Access Management, you can provide time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on critical resources.
• WITH OPTIONAL: Endpoint Privilege Management Deployment
• Implement policies to configure and manage file elevation requests using Microsoft Endpoint Privilege Management.