| Basic Mobility & Security | Identity | Yes | Yes | Yes |
| Basic Audit | Identity | Yes | Yes | Yes |
| MFA including Hellp for Business | Identity | No | No | Yes |
| Conditional Access | Identity | No | No | Yes |
| Defender for Cloud App Discovery | Identity | No | No | Yes |
| App Proxy | Identity | No | No | Yes |
| Single Sign On for SaaS Apps | Identity | No | No | Yes |
| Email DLP Standard | Information Protection | No | Yes | Yes |
| SharePont DLP Standard | Information Protection | No | Yes | Yes |
| Email Inactive Mailbox | Information Protection | No | No | Yes |
| Email Legal Hold | Information Protection | No | No | Yes |
| Email eDiscovery | Information Protection | No | No | Yes |
Document Legal Hold
| Information Protection | No | No | Yes |
| Document eDiscovery | Information Protection | No | No | Yes |
| Azure AD Join | Device Management | No | No | Yes |
| Azure AD register | Device Management | No | No | Yes |
| Windows Auto Pilot | Device Management | No | No | Yes |
| Lock USB Storage devices | Device Management | No | No | Yes |
| Remote Lock Corporate Device | Device Management | No | No | Yes |
| Allow Public WiFi access only on Corporate device | Device Management | No | No | Yes |
| Application Management on all Devices | Device Management | No | No | Yes |
| Prevent sync of Work Docs with Personal Cloud | Mobile Device DLP | No | No | Yes |
| Access Corporate Data only via Managed Apps | Mobile Device DLP | No | No | Yes |
| Restricting the copy/ paste of corporate data within Office 365 apps only in Mobile. | Mobile Device DLP | No | No | Yes |
| Use app protection policies that require multi-factor authentication (MFA) to use the apps like Outlook, Teams, etc. | Mobile Device DLP | No | No | |
| Lock down Exchange Online so that it can be used only by Outlook Mobile. | Mobile Device DLP | No | No | Yes |
| Block the printing of corporate data. (App protection) | Mobile Device DLP | No | No | Yes |
| Block taking screenshot of corporate data (App protection) | Mobile Device DLP | No | No | Yes |
| Ensure Corporate data is saved only to One Drive and SharePoint on Mobiles | Mobile Device DLP | No | No | Yes |
| Wipe Corporate Data from system if it gets lost. | Mobile Device DLP | No | No | Yes |
| Defender for Office 365 | Threat Management | No | No | Yes |
| Defender for Business | Threat Management | No | No | Yes |
| Windows Defender Exploit Guard | Threat Management | No | No | Yes |
| Bitlocker & Bitlocker to Go | Device DLP | No | No | Yes |
| Cost Per User ( min 50 users) | | FREE with Licenses | 1200 | 2500 |
| Licenses | | M 365 Business Basic and Above | M 365 Business Basic and Above | M 365 Business Premium and Above |
| | | | |
| | | | |