secure

Endpoint Security

Microsoft Defender for Endpoint, Intune compliance, attack surface reduction, and device management.

Added in Endpoint (Plan 2)

  • Windows Device Management — Intune enrollment and management for Windows devices
  • macOS Device Management — Intune enrollment and management for macOS devices
  • Android Device Management — Intune enrollment and management for Android devices
  • iOS Device Management — Intune enrollment and management for iOS devices
  • Patch Management — Windows Update for Business and application patching via Intune
  • Attack Surface Reduction Rules — Defender for Endpoint ASR rules aligned to CIS L1
  • Defender for Endpoint - Windows — Microsoft Defender for Endpoint EDR on Windows devices
  • Defender for Endpoint - macOS — Microsoft Defender for Endpoint on macOS devices

Added in Information Governance (Plan 3)

  • Application Guard for Office — Microsoft Defender Application Guard for Office documents

ISO 27001 Controls Covered