150+ companieshelped through Aramco CCC
3 to 5 weekstypical CCC readiness time
Up to 300 usersper Business Premium tenant

Is your Microsoft 365 ready for Aramco CCC? Free 10-point check

Tick what is already in place in your company. You will see your score and the gaps an auditor is likely to find. Send the result to us and we will tell you how to close each gap.

Business Standard vs Business Premium: what changes for security

Business StandardBusiness Premium
MFABasic MFA (security defaults)MFA with Conditional Access rules (Entra ID P1)
Device managementNot includedMicrosoft Intune: policies, BitLocker, screen lock, remote wipe
Endpoint protectionNot includedMicrosoft Defender for Business (antivirus and EDR)
Email protectionStandard spam and malware filteringDefender for Office 365: Safe Links, Safe Attachments, anti-phishing
Data protectionNot includedPurview sensitivity labels and data loss prevention
Email archivingNot includedExchange Online Archiving
UsersUp to 300Up to 300

Feature lists can change; we confirm the current features in your quotation.

How Business Premium covers the Microsoft 365 part of CCC and NCA ECC

RequirementBusiness Premium featureWhat our team sets up
MFA for email and cloud accessEntra ID Conditional AccessMFA for all users, block legacy sign-in, trusted locations
Password and screen-lock policyIntune compliance policiesPassword rules, automatic screen lock, compliant-device access
Device encryptionBitLocker through IntuneEncryption on every laptop with recovery keys stored safely
Antivirus and EDRDefender for BusinessOnboard every device, alerts and weekly reports
Phishing and malicious linksDefender for Office 365Safe Links, Safe Attachments and anti-phishing policies
Patch managementWindows Update for Business through IntuneUpdate rings and patch compliance reports
Data protectionPurview labels and DLPLabels for confidential files and blocking risky external sharing
Logs and evidenceMicrosoft 365 audit logAudit logging on, and an evidence pack for your auditor

Business Premium covers the Microsoft 365 controls. CCC also needs a firewall, backups, security awareness and written policies; our CCC team covers those too.

Get a free Microsoft 365 CCC check

Why Business Premium is the value choice in 2026

Microsoft raised the prices of most Microsoft 365 plans on 1 July 2026, including Business Basic, Business Standard, E3 and E5. Business Premium was not part of that increase.

For companies that need CCC or NCA ECC controls, Business Premium usually costs less than Business Standard plus separate antivirus, device management and email security tools, and everything is managed from one place. For extra protection, Microsoft also offers Defender and Purview add-on suites for Business Premium.

IT administrator securing Microsoft 365 for Aramco CCC

How we get your Microsoft 365 CCC-ready

Free check

We review your Microsoft 365 setup against CCC and NCA ECC requirements and list the gaps.

Licences

We move your users to Business Premium, supplied through our Saudi distributors, with no loss of email or files.

Configuration

We set up MFA, Conditional Access, Intune, BitLocker, Defender and email protection, tested with your team.

Evidence pack

We prepare screenshots and reports that show each control, ready for your auditor.

Support

We monitor alerts and keep your settings compliant, and help again at CCC renewal.

Companies across Saudi Arabia that trust Waves

Engineering, contracting and industrial companies, many of them Aramco suppliers, rely on our team.

Saudi Engineering Group International logo
Tesco Engineering logo
Golden Engineering Contracting logo
Gulf Consult logo
Sicilsaldo logo
Bright East Steel Company logo
Automation Power Solutions & Projects logo
Mofarreh Al-Harbi & Partners logo

See all our clients →

Frequently asked questions

Is Microsoft 365 Business Premium enough to pass Aramco CCC?

It covers the Microsoft 365 part: MFA, device management, encryption, endpoint protection and email security. CCC also checks your firewall, backups, awareness training and policies. We help with the full CCC, and more than 150 companies have passed with our support.

What is the difference between Business Standard and Business Premium?

Both include Office apps, email and Teams. Business Premium adds Intune device management, Defender for Business, Defender for Office 365, Conditional Access and Purview data protection, which are the controls most CCC and NCA ECC audits look for.

Can we upgrade from Business Standard to Business Premium without losing data?

Yes. It is a licence change in the same Microsoft 365 tenant. Email, files and Teams stay as they are; we then switch on and configure the security features.

How do we turn on MFA for all users?

With Business Premium we use Conditional Access to require MFA for every user, block old sign-in methods and allow exceptions only where needed. We help each user set up the Microsoft Authenticator app.

What is Microsoft Intune used for?

Intune manages company laptops and phones: it enforces passwords and screen lock, encrypts devices with BitLocker, pushes updates, and can wipe a lost device. It is included in Business Premium.

Does Business Premium help with NCA ECC?

Yes. MFA, device security, endpoint protection, email protection and logging in Business Premium support many NCA Essential Cybersecurity Controls. We map each control during the check.

How long does the setup take?

For most companies up to 100 users, licences and configuration take 1 to 3 weeks, including testing and user support.

Is Business Premium limited to 300 users?

Yes. Companies with more than 300 users use Microsoft 365 E3 or E5 with the same security features or more.

Can we add Copilot later?

Yes. Microsoft 365 Copilot can be added to Business Premium. Correct permissions and data labels, set up as part of CCC, also make Copilot safer to use.

Get your free Microsoft 365 CCC check

Tell us your number of users and your current Microsoft 365 plan. We will check your setup and send you the gaps and a quotation.

Ask on WhatsApp

Request a free Microsoft 365 check

    العربية
    Verified by MonsterInsights