Blog Post

Microsoft 365 Blog
6 MIN READ

Making it easier for small and medium businesses to stay secure

NehaBhaskar's avatar
NehaBhaskar
Icon for Microsoft rankMicrosoft
Oct 02, 2023

As we mark the 20th anniversary of Cybersecurity Awareness Month, we see security becoming an increasing focus for small and medium business customers (SMBs). Infact, 82 percent of ransomware attacks target small businesses[1] and the total cost of cybercrimes to small businesses reached $2.4 billion worldwide in 2021[2]. However, many small businesses are insufficiently protected as sophisticated security solutions have traditionally been out of reach- either too expensive or too complex or both.

 

At Microsoft, we believe in security for all and are committed to bringing enterprise security innovation to SMBs. With Microsoft 365 Business Premium and Microsoft Defender for Business, we brought enterprise-grade security to SMB customers that is affordable and easy to use. Defender for Business brings enterprise-grade endpoint security to SMBs to help protect against ransomware and other advanced cyberthreats. Microsoft 365 Business Premium brings together a comprehensive security and collaboration suite, that includes Defender for Business, along with email protection, device management and data protection. To mark Cybersecurity Awareness Month, we’re offering new Microsoft 365 Business Premium customers a 10% discount off an annual subscription throughout October 2023 in the US, UK and Canada. This offer is available exclusively on our website. Business Premium promotions for new customers are also available through partners in select markets. Partners can learn more here.

 

SMBs often rely on partners to secure their IT environments. Recognizing the important contributions of partners, we are also bringing new innovations that will help managed service providers (MSPs) more easily deliver security services to customers.

 

Elevating security for small and medium businesses

Many SMBs rely on a single layer of protection – such as traditional antivirus solutions to protect themselves. With the rise of sophisticated cyberattacks including ransomware as a service, these solutions are woefully inadequate. This is because traditional antivirus provides only a single layer of protection by matching against signatures to protect against known threats. - like a lock on the front door. Much like a physical lock can be bypassed by a determined threat actor, so can traditional antivirus with sophisticated attacks. It leaves businesses vulnerable to unknown threats, malicious websites, and targeted attacks. This is where Defender for Business steps in and goes above and beyond to track and fix vulnerabilities with threat and vulnerability management capabilities. It has next-gen Defender Antivirus which not only protects against known threats, but also identifies and helps protect against emerging threats. Defender for Business also brings post-breach technologies such as Endpoint Detection and Response, and AI powered Automated Investigation and Remediation and Automatic Attack Disruption which are designed to detect and respond to threats. It’s like adding security cameras and an alarm system to complement the lock on the door which will detect, alert, and respond to malicious activities taking place on devices.

 

 

Defender for Business adds multi-layered protection against ransomware and other threats

 

 

 

 

Microsoft 365 Business Premium brings the best of Office apps, Microsoft 365 services and Teams, with a comprehensive security suite to SMBs- offering protection across identity and access with Microsoft Entra ID Plan 1 (formerly Azure AD Premium Plan 1), endpoint security with Defender for Business, protection across email, Teams, OneDrive with Defender for Office 365, data protection with Azure Information protection and device management with Microsoft Intune. We’re also continuing to bring new innovations to Business Premium and Defender for Business -with the recently announced mobile threat defense capabilities that lets SMBs protect mobile devices without needing additional management software as well as security value reports that helps you see threats that were detected and prevented.

 

Comprehensive security with Microsoft 365 Business Premium

 

At Microsoft, we are committed to making our solutions accessible and affordable for SMBs.  As part of cybersecurity month, we’re offering a  10% price promotion for Microsoft 365 Business Premium annual subscriptions for new customers through October 2023– available via our website in the US, UK and Canada. For businesses looking to purchase through partners, Business Premium promotions for new customers are also available through partners in select markets. Partners can learn more here.

 

Automatic Attack Disruption, an Industry first capability for SMBs

We are thrilled to announce expanded Automatic Attack Disruption capabilities in Defender for Business that helps stop human-operated attacks. This is a unique, Industry first capability in Defender for Business and Defender for Endpoint that helps protect customers against human operated ransomware attacks by containing compromised users across devices to outmaneuver attackers before they have the chance to act maliciously or move laterally. Once devices are onboarded to Defender for Business, this capability is activated by default, so there is no action required for customers to activate it. For small and medium businesses (SMBs), who often lack access to sophisticated security solutions or expertise, this “on by default” capability helps them stay protected from the latest threats, while they focus on running their business. This is available in Defender for Business standalone and as part of Microsoft 365 Business Premium. Read the announcement  for more details.

 

Making it easier for partners to deliver security services to SMB customers

Since SMBs often rely on partners to secure their IT environment, we are also empowering partners to deliver security services more easily to their customers.

 

Innovations with Microsoft 365 Lighthouse

To help partners easily manage multiple customers at scale, we are announcing new innovations in Microsoft 365 Lighthouse, a unified portal to help partners easily manage multiple customers from one place.

Partners will now have the ability to configure customized email alerts for delivery to users, groups or third-party ticketing systems such as Professional Services Automation systems, directly from Lighthouse. For example, you can customize email alerts for scenarios such as

  • Devices without antivirus protection
  • Variation from custom baselines
  • Non-Compliant Devices
  • Security Incidents from Defender for Business
  • Active Threats on a Device
  • Risky Users
  • Windows event logs

 

Alert overview for Microsoft Defender for Business Alert Configuration in Microsoft 365 Lighthouse

 

Our goal is to help MSPs reduce the costs and complexity of managing alerts in multiple admin portals and help streamline their workflows.

Additionally, partners can now see an aggregate view of the Secure Score of all their managed tenants, with the ability to view each managed tenants’ individual secure score and trend directly in M365 Lighthouse.

 

Integrations with leading MDR and RMM/PSA

 

At Inspire, we announced streaming APIs to enable attack disruption and advanced hunting scenarios for partners who want to build their own Managed Detection and Response (MDR) service or security operations center (SOC).

With a 3.4M cyberskill shortage, we recognize that many SMB partners also face a shortage of security professionals.  For partners who want to resell security services but do not have the resources to invest in an in-house security operations center (SOC), we are pleased to announce integrations with leading MDR providers. Partners can use MDR services to help triage, hunt and remediate incidents and alerts, easing the complexity of managing security operations for a customer.  Partners will also soon be able to easily onboard, deploy and manage Defender for Business through Remote Monitoring and Management (RMM) tools.

 

  1. At Inspire, we announced Blackpoint Cyber’s MDR integration with Defender for Business and Business Premium. This integration will be available in November to MSPs and resellers via Pax8’s marketplace and continues Pax8’s commitment to helping MSPs and resellers enhance their Microsoft security services.
  2. ConnectWise’s MDR integration with Defender for Business is now available for partners. ConnectWise’s Remote Monitoring and Management and Professional Services Automation solutions will soon integrate with Microsoft Defender for Business (standalone and as part of Microsoft 365 Business Premium); integrations will start rolling out later this year.

 

 

Learn more about Microsoft’s SMB solutions  

Learn more about Microsoft 365 Business Premium and Microsoft Defender for Business from our website. You can also check out the latest blogpost on AI innovations in SMB.

 

Resources for partners

Partners can access training resources, customer decks and deployment checklists from our Business Premium partner playbook and Defender for Business Partner kit.

Join our next partner connect call on November 16th to learn more about the latest SMB innovations and partner benefits.

 

References

[1] The Devastating Impact of Ransomware Attacks on Small Businesses, Quinn Cleary. April 4, 2023.

[2] Accelerating Our Economy Through Better Security: Helping America’s Small Businesses Address Cyber Threats | CISA, May 2, 2023

 

 

Updated Nov 01, 2023
Version 7.0

7 Comments

  • It would be useful if the Blog pointed to where it is referenced - all the blog says is "Business Premium promotions for new customers are also available through partners in select markets."

     

    Is it possible to point to the reference ?

  • Hi MarkLawtonRisc ,  Business Premium promotions are also available through partners in select markets, as we mention in the blog. Partners can learn more here.

  • Disappointing to see that you are side-lining Partners here with the 10% discount only available via the website.

     

     

     

  • Snookzii's avatar
    Snookzii
    Copper Contributor

    Project Progress Report

     

    Project Name: Customer Database Management System

     

    Project Status:

     

    The customer database management system project is currently in progress. The development team has completed the analysis and design phase, and they are now working on the implementation phase. Currently, the team is working on developing the database schema, creating user interfaces, and implementing business logic.

     

    Accomplishments:

     

    During the analysis and design phase, the team has successfully completed the following tasks:

     

    - Gathered requirements from stakeholders and documented them in the project specification document.

    - Created a detailed project plan and timeline for the entire project.

    - Designed the database schema and ER diagram based on the requirements.

    - Created wireframes for the user interface.

     

    During the implementation phase, the team has completed the following tasks:

     

    - Developed the database schema and created the necessary tables, stored procedures, and triggers.

    - Created a user registration form and login page.

    - Implemented the search functionality for customers.

     

    Challenges:

     

    The team faced the following challenges during the implementation phase:

     

    - Integrating the frontend with the backend was more difficult than initially anticipated.

    - The team had to make some changes to the database schema due to changes in requirements, which resulted in some delays.

    - The team had to spend extra time on testing and debugging.

     

    Next Steps:

     

    The development team will continue working on the implementation phase and complete the following tasks:

     

    - Implement the remaining user interfaces.

    - Add functionality to edit and delete customer records.

    - Implement security features such as password encryption and role-based access control.

    - Conduct thorough testing and debugging to ensure the system is working as expected.

     

    Conclusion:

     

    Overall, the project is progressing well, and the team is working hard to ensure the project is completed on time and within budget. The team is confident that they will be able to overcome the challenges and deliver a high-quality customer database management system that meets the requirements of all stakeholders.