| Feature | Standard R290 | Premium R420 |
|---|---|---|
| Email + Office apps + 1TB OneDrive | ✓ | ✓ |
| Intune device management | — | ✓ Enforce BitLocker, block personal devices |
| Defender for Business | — | ✓ Stops ransomware lateral movement |
| DLP + Information Protection (ID numbers) | — | ✓ Block ID numbers leaving via email |
| Conditional Access SA only | — | ✓ Block logins outside SA, impossible travel |
| POPIA ready | Partial | ✓ Full 8 conditions |
Business Standard: Email + Office apps + 1TB OneDrive. No advanced security. Good for micro businesses with no POPIA data.
Business Premium (R420): Includes everything in Standard plus: Intune device management, Defender for Business, DLP, Conditional Access, Information Protection. For POPIA firms, Premium pays for itself when you avoid one breach. With our R450/user M365 Secure, you get Premium license + setup + hardening + monthly reports. No extra IT hire needed.
We migrated a 22-user manufacturing firm from Standard to Premium with zero downtime – Friday evening start, Monday 8am Outlook worked. Secure Score 28 → 91.
M365 Security Checklist 2026 + POPIA email checklist PDF. Same controls we use for 5-50 staff.
Download PDF →