Device security (disk encryption and USB control)
Encryption so a lost laptop does not expose your data, and controls on USB drives that can carry in malware or carry data out.
What it is
Disk encryption scrambles everything stored on a computer so it can only be read after a proper sign-in. If the device is lost or stolen, the data stays unreadable.
USB control sets rules for removable drives, such as blocking unknown devices or allowing them read-only, so files cannot be quietly copied out and unknown drives cannot bring malware in.
Why it matters for small and midsize businesses
Laptops get left in cars, airports, and coffee shops. Without encryption, a lost laptop can turn into a data breach you might have to disclose to customers. USB drives are a simple way to carry malware in or sensitive files out, whether on purpose or by accident.
Both protections are inexpensive compared with the cost of a breach, and they help you meet customer and regulatory expectations for protecting data.
Where it fits
Advanced Security includes everything in Fundamentals, plus:
- Endpoint defense (EDR) Protection on each device that detects suspicious behavior, not just known viruses, and can isolate a compromised computer.
- Identity and Microsoft 365 security Protecting the logins and settings behind your Microsoft 365 accounts, because stolen passwords are one of the most common ways in.
- Email security Filtering that catches phishing, malicious attachments, and impersonation before they reach your staff's inboxes.
- Security awareness and phishing simulations Short, regular training and practice phishing emails that teach employees to spot scams and report them.
- Device security (disk encryption and USB control) Encryption so a lost laptop does not expose your data, and controls on USB drives that can carry in malware or carry data out.
- Secure internet / web protection Filtering that blocks dangerous websites and downloads before an employee's browser reaches them.
- Microsoft 365 cloud backup A separate backup of your Microsoft 365 email and files, because keeping data in the cloud is not the same as having a backup.
Not sure whether this fits your business?
Start with a free checkup. We'll look at your setup and tell you plainly what makes sense and what doesn't.