MFA, Intune device management, Defender for Business and email protection in one Microsoft 365 licence, set up by the team that has helped 150+ companies pass Aramco CCC. Take the free 10-point check below to see what your Microsoft 365 is missing.
Tick what is already in place in your company. You will see your score and the gaps an auditor is likely to find. Send the result to us and we will tell you how to close each gap.
| Business Standard | Business Premium | |
|---|---|---|
| MFA | Basic MFA (security defaults) | MFA with Conditional Access rules (Entra ID P1) |
| Device management | Not included | Microsoft Intune: policies, BitLocker, screen lock, remote wipe |
| Endpoint protection | Not included | Microsoft Defender for Business (antivirus and EDR) |
| Email protection | Standard spam and malware filtering | Defender for Office 365: Safe Links, Safe Attachments, anti-phishing |
| Data protection | Not included | Purview sensitivity labels and data loss prevention |
| Email archiving | Not included | Exchange Online Archiving |
| Users | Up to 300 | Up to 300 |
Feature lists can change; we confirm the current features in your quotation.
| Requirement | Business Premium feature | What our team sets up |
|---|---|---|
| MFA for email and cloud access | Entra ID Conditional Access | MFA for all users, block legacy sign-in, trusted locations |
| Password and screen-lock policy | Intune compliance policies | Password rules, automatic screen lock, compliant-device access |
| Device encryption | BitLocker through Intune | Encryption on every laptop with recovery keys stored safely |
| Antivirus and EDR | Defender for Business | Onboard every device, alerts and weekly reports |
| Phishing and malicious links | Defender for Office 365 | Safe Links, Safe Attachments and anti-phishing policies |
| Patch management | Windows Update for Business through Intune | Update rings and patch compliance reports |
| Data protection | Purview labels and DLP | Labels for confidential files and blocking risky external sharing |
| Logs and evidence | Microsoft 365 audit log | Audit logging on, and an evidence pack for your auditor |
Business Premium covers the Microsoft 365 controls. CCC also needs a firewall, backups, security awareness and written policies; our CCC team covers those too.
Microsoft raised the prices of most Microsoft 365 plans on 1 July 2026, including Business Basic, Business Standard, E3 and E5. Business Premium was not part of that increase.
For companies that need CCC or NCA ECC controls, Business Premium usually costs less than Business Standard plus separate antivirus, device management and email security tools, and everything is managed from one place. For extra protection, Microsoft also offers Defender and Purview add-on suites for Business Premium.

We review your Microsoft 365 setup against CCC and NCA ECC requirements and list the gaps.
We move your users to Business Premium, supplied through our Saudi distributors, with no loss of email or files.
We set up MFA, Conditional Access, Intune, BitLocker, Defender and email protection, tested with your team.
We prepare screenshots and reports that show each control, ready for your auditor.
We monitor alerts and keep your settings compliant, and help again at CCC renewal.
Engineering, contracting and industrial companies, many of them Aramco suppliers, rely on our team.








It covers the Microsoft 365 part: MFA, device management, encryption, endpoint protection and email security. CCC also checks your firewall, backups, awareness training and policies. We help with the full CCC, and more than 150 companies have passed with our support.
Both include Office apps, email and Teams. Business Premium adds Intune device management, Defender for Business, Defender for Office 365, Conditional Access and Purview data protection, which are the controls most CCC and NCA ECC audits look for.
Yes. It is a licence change in the same Microsoft 365 tenant. Email, files and Teams stay as they are; we then switch on and configure the security features.
With Business Premium we use Conditional Access to require MFA for every user, block old sign-in methods and allow exceptions only where needed. We help each user set up the Microsoft Authenticator app.
Intune manages company laptops and phones: it enforces passwords and screen lock, encrypts devices with BitLocker, pushes updates, and can wipe a lost device. It is included in Business Premium.
Yes. MFA, device security, endpoint protection, email protection and logging in Business Premium support many NCA Essential Cybersecurity Controls. We map each control during the check.
For most companies up to 100 users, licences and configuration take 1 to 3 weeks, including testing and user support.
Yes. Companies with more than 300 users use Microsoft 365 E3 or E5 with the same security features or more.
Yes. Microsoft 365 Copilot can be added to Business Premium. Correct permissions and data labels, set up as part of CCC, also make Copilot safer to use.
Tell us your number of users and your current Microsoft 365 plan. We will check your setup and send you the gaps and a quotation.