What security capabilities could you already own?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nMany organisations already license Microsoft security capabilities they haven’t yet fully deployed or adopted. <\/p>\n\n\n\n
The capabilities available will depend on your Microsoft licensing. Microsoft 365 E5 includes Microsoft’s broadest set of integrated security and compliance capabilities, including: <\/p>\n\n\n\n
\n\n\n \n Microsoft Defender<\/strong><\/h3>\nProtect users, devices and workloads across email, endpoints and cloud environments.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft
\nEntra<\/strong><\/h3>\nSecure identity and access by controlling who can access what, and under which conditions.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Intune<\/h3>\n
Manage and secure corporate devices across laptops, mobile devices and endpoints.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Purview<\/strong><\/h3>\nHelp protect sensitive information through data security, compliance and information governance.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Sentinel<\/strong><\/h3>\nDetect, investigate and respond to threats through a unified security operations platform.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
For many organisations, these capabilities overlap with third-party products that remain in place because of historic purchasing decisions, contract renewals or phased migration plans. Understanding what’s already included in your Microsoft licensing is often the first step towards identifying opportunities to simplify your security estate. <\/p>\n\n\n\n
<\/div>\n\n\n\nWhere does the saving come from?<\/strong> <\/h2>\n\n\n\n<\/div>\n\n\n\nIn the Forrester study, the researchers needed a simple way to represent the cost of Microsoft’s security capabilities. To do this, they used the difference in list price between Microsoft 365 E3 and E5, approximately \u20ac18 per user per month, as a proxy. <\/p>\n\n\n\n
Here’s the important point: for organisations that already licensed Microsoft 365 E5, there was no additional licence cost. The security capabilities were already included. The value came from deploying and making better use of them. <\/p>\n\n\n\n
That’s the practical value of consolidation. You’re not always buying something new. Often, you’re making better use of the capabilities you already own and retiring overlapping tools that no longer add value. <\/p>\n\n\n\n
<\/div>\n\n\n\n\n \n \n\nWhy the value has increased again<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\nWhy does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
Many organisations already license Microsoft security capabilities they haven’t yet fully deployed or adopted. <\/p>\n\n\n\n
The capabilities available will depend on your Microsoft licensing. Microsoft 365 E5 includes Microsoft’s broadest set of integrated security and compliance capabilities, including: <\/p>\n\n\n\n
Microsoft Defender<\/strong><\/h3>\nProtect users, devices and workloads across email, endpoints and cloud environments.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft
\nEntra<\/strong><\/h3>\nSecure identity and access by controlling who can access what, and under which conditions.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Intune<\/h3>\n
Manage and secure corporate devices across laptops, mobile devices and endpoints.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Purview<\/strong><\/h3>\nHelp protect sensitive information through data security, compliance and information governance.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Sentinel<\/strong><\/h3>\nDetect, investigate and respond to threats through a unified security operations platform.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
For many organisations, these capabilities overlap with third-party products that remain in place because of historic purchasing decisions, contract renewals or phased migration plans. Understanding what’s already included in your Microsoft licensing is often the first step towards identifying opportunities to simplify your security estate. <\/p>\n\n\n\n
<\/div>\n\n\n\nWhere does the saving come from?<\/strong> <\/h2>\n\n\n\n<\/div>\n\n\n\nIn the Forrester study, the researchers needed a simple way to represent the cost of Microsoft’s security capabilities. To do this, they used the difference in list price between Microsoft 365 E3 and E5, approximately \u20ac18 per user per month, as a proxy. <\/p>\n\n\n\n
Here’s the important point: for organisations that already licensed Microsoft 365 E5, there was no additional licence cost. The security capabilities were already included. The value came from deploying and making better use of them. <\/p>\n\n\n\n
That’s the practical value of consolidation. You’re not always buying something new. Often, you’re making better use of the capabilities you already own and retiring overlapping tools that no longer add value. <\/p>\n\n\n\n
<\/div>\n\n\n\n\n \n \n\nWhy the value has increased again<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\nWhy does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
Microsoft
\nEntra<\/strong><\/h3>\nSecure identity and access by controlling who can access what, and under which conditions.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Intune<\/h3>\n
Manage and secure corporate devices across laptops, mobile devices and endpoints.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Purview<\/strong><\/h3>\nHelp protect sensitive information through data security, compliance and information governance.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Sentinel<\/strong><\/h3>\nDetect, investigate and respond to threats through a unified security operations platform.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
For many organisations, these capabilities overlap with third-party products that remain in place because of historic purchasing decisions, contract renewals or phased migration plans. Understanding what’s already included in your Microsoft licensing is often the first step towards identifying opportunities to simplify your security estate. <\/p>\n\n\n\n
<\/div>\n\n\n\nWhere does the saving come from?<\/strong> <\/h2>\n\n\n\n<\/div>\n\n\n\nIn the Forrester study, the researchers needed a simple way to represent the cost of Microsoft’s security capabilities. To do this, they used the difference in list price between Microsoft 365 E3 and E5, approximately \u20ac18 per user per month, as a proxy. <\/p>\n\n\n\n
Here’s the important point: for organisations that already licensed Microsoft 365 E5, there was no additional licence cost. The security capabilities were already included. The value came from deploying and making better use of them. <\/p>\n\n\n\n
That’s the practical value of consolidation. You’re not always buying something new. Often, you’re making better use of the capabilities you already own and retiring overlapping tools that no longer add value. <\/p>\n\n\n\n
<\/div>\n\n\n\n\n \n \n\nWhy the value has increased again<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\nWhy does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
Microsoft Intune<\/h3>\n
Manage and secure corporate devices across laptops, mobile devices and endpoints.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
Microsoft Purview<\/strong><\/h3>\nHelp protect sensitive information through data security, compliance and information governance.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
\n\n \n Microsoft Sentinel<\/strong><\/h3>\nDetect, investigate and respond to threats through a unified security operations platform.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
For many organisations, these capabilities overlap with third-party products that remain in place because of historic purchasing decisions, contract renewals or phased migration plans. Understanding what’s already included in your Microsoft licensing is often the first step towards identifying opportunities to simplify your security estate. <\/p>\n\n\n\n
<\/div>\n\n\n\nWhere does the saving come from?<\/strong> <\/h2>\n\n\n\n<\/div>\n\n\n\nIn the Forrester study, the researchers needed a simple way to represent the cost of Microsoft’s security capabilities. To do this, they used the difference in list price between Microsoft 365 E3 and E5, approximately \u20ac18 per user per month, as a proxy. <\/p>\n\n\n\n
Here’s the important point: for organisations that already licensed Microsoft 365 E5, there was no additional licence cost. The security capabilities were already included. The value came from deploying and making better use of them. <\/p>\n\n\n\n
That’s the practical value of consolidation. You’re not always buying something new. Often, you’re making better use of the capabilities you already own and retiring overlapping tools that no longer add value. <\/p>\n\n\n\n
<\/div>\n\n\n\n\n \n \n\nWhy the value has increased again<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\nWhy does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
Microsoft Sentinel<\/strong><\/h3>\nDetect, investigate and respond to threats through a unified security operations platform.<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
For many organisations, these capabilities overlap with third-party products that remain in place because of historic purchasing decisions, contract renewals or phased migration plans. Understanding what’s already included in your Microsoft licensing is often the first step towards identifying opportunities to simplify your security estate. <\/p>\n\n\n\n
<\/div>\n\n\n\nWhere does the saving come from?<\/strong> <\/h2>\n\n\n\n<\/div>\n\n\n\nIn the Forrester study, the researchers needed a simple way to represent the cost of Microsoft’s security capabilities. To do this, they used the difference in list price between Microsoft 365 E3 and E5, approximately \u20ac18 per user per month, as a proxy. <\/p>\n\n\n\n
Here’s the important point: for organisations that already licensed Microsoft 365 E5, there was no additional licence cost. The security capabilities were already included. The value came from deploying and making better use of them. <\/p>\n\n\n\n
That’s the practical value of consolidation. You’re not always buying something new. Often, you’re making better use of the capabilities you already own and retiring overlapping tools that no longer add value. <\/p>\n\n\n\n
<\/div>\n\n\n\n\n \n \n\nWhy the value has increased again<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\nWhy does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
Where does the saving come from?<\/strong> <\/h2>\n\n\n\n<\/div>\n\n\n\nIn the Forrester study, the researchers needed a simple way to represent the cost of Microsoft’s security capabilities. To do this, they used the difference in list price between Microsoft 365 E3 and E5, approximately \u20ac18 per user per month, as a proxy. <\/p>\n\n\n\n
Here’s the important point: for organisations that already licensed Microsoft 365 E5, there was no additional licence cost. The security capabilities were already included. The value came from deploying and making better use of them. <\/p>\n\n\n\n
That’s the practical value of consolidation. You’re not always buying something new. Often, you’re making better use of the capabilities you already own and retiring overlapping tools that no longer add value. <\/p>\n\n\n\n
<\/div>\n\n\n\n\n \n \n\nWhy the value has increased again<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\nWhy does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
In the Forrester study, the researchers needed a simple way to represent the cost of Microsoft’s security capabilities. To do this, they used the difference in list price between Microsoft 365 E3 and E5, approximately \u20ac18 per user per month, as a proxy. <\/p>\n\n\n\n
Here’s the important point: for organisations that already licensed Microsoft 365 E5, there was no additional licence cost. The security capabilities were already included. The value came from deploying and making better use of them. <\/p>\n\n\n\n
That’s the practical value of consolidation. You’re not always buying something new. Often, you’re making better use of the capabilities you already own and retiring overlapping tools that no longer add value. <\/p>\n\n\n\n
Why the value has increased again<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\nWhy does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
In November 2025, Microsoft announced that Security Copilot would be included with Microsoft 365 E5, further increasing the value of the licence for organisations already using it.<\/p>\n\n\n\n
One organisation interviewed as part of the Forrester study reported that Security Copilot saved each member of its security team between eight and ten hours a week. Without it, the organisation estimated it would have needed to hire four additional team members.<\/p>\n\n\n\n
While every organisation’s experience will differ, the finding highlights an important point. The value of Microsoft 365 E5 extends beyond consolidating licences. When its capabilities are fully adopted, they can help security teams work more efficiently, reduce manual effort and focus on the tasks that require human expertise.<\/p>\n\n\n <\/div>\n<\/div>\n\n\n\n
Why does it go unused?<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\nIn our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
\n- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n\n\n \n Map what you own<\/strong><\/h3>\nUnderstand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
In our experience, there are a few common reasons why organisations don’t make full use of the Microsoft security capabilities they already own: <\/p>\n\n\n\n
- \n
- Microsoft 365 was originally deployed to support productivity and collaboration, with security capabilities introduced later <\/li>\n\n\n\n
- Existing third-party tools remain in place because of contract commitments, operational dependencies or phased migration plans <\/li>\n\n\n\n
- Teams don’t always have full visibility of the security capabilities included in their Microsoft licensing <\/li>\n\n\n\n
- Organisations rarely review their existing security estate to identify overlapping capabilities and opportunities for consolidation <\/li>\n\n\n\n
- Deploying new security capabilities requires planning, testing and change management, so adoption often happens gradually<\/li>\n<\/ul>\n\n\n\n<\/div>\n\n\n\n
What does switching it on involve?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n
<\/div>\n\n\n\n\n\nMoving to the tools you already own does not need to be a risky, all-at-once project.<\/p>\n\n\n\n
In the Forrester study, most organisations fully deployed their Microsoft Security tools in four to nine months, around 36% faster than organisations using a less integrated approach.<\/p>\n\n\n\n
A practical approach looks like this:<\/strong><\/p>\n<\/div>\n\n\n\n
\n\n\nMap what you own<\/strong><\/h3>\n
Understand the Microsoft security capabilities already available within your environment<\/p>\n \n <\/div>\n\n<\/div>\n<\/div>\n\n\n\n
![\"\"](\"https:\/\/cwsisecurity.com\/wp-content\/themes\/bootscore-child\/assets\/img\/blur-green.svg\"\n)
\n ![\"\"](\"https:\/\/cwsisecurity.com\/wp-content\/themes\/bootscore-child\/assets\/img\/blur-purple.svg\"\n)
\n\n ![\"\"\n](\"https:\/\/cwsisecurity.com\/wp-content\/uploads\/2026\/08\/003-1.jpg\"\n)
\n <\/div>\n