Overview


Microsoft Enterprise Mobility + Security

(EMS) is a cloud-based offering that helps organizations protect their data and devices, manage their identities and access, and enable secure collaboration. EMS consists of five components: Azure Active Directory, Microsoft Intune, Azure Information Protection, Microsoft Cloud App Security, and Microsoft Defender for Identity. Together, these components provide a unified and integrated solution that covers the following scenarios:

  • Identity and access management: EMS enables organizations to manage user identities, devices, and applications across variety of on-premises and cloud environments. It also provides single sign-on, multi-factor authentication, conditional access, and identity protection capabilities to ensure that only your authorized users can access sensitive resources.
  • Device and app management: EMS helps organizations manage and secure their devices, whether they are corporate-owned or personal, across various platforms and operating systems. It also allows organizations to deploy and manage apps, policies, and updates to their devices, and to wipe or retire them remotely if needed.
  • Data protection: EMS helps organizations protect their data from unauthorized access, leakage, or loss, both at rest and in transit. It also enables organizations to classify, label, and encrypt their data, and to monitor and control how it is shared and accessed.
  • Cloud app security: EMS helps organizations discover, assess, and control the use of cloud apps and services in their environment. It also provides visibility into the activities and risks associated with cloud apps, and allows organizations to enforce policies and remediate issues.
  • Threat protection: EMS helps organizations detect and respond to advanced threats and attacks on their identities, devices, and data. It also provides behavioral analytics, anomaly detection, and investigation tools to help organizations identify and mitigate threats.