Enterprise Mobility + Security E5: What It Includes and Who Needs It (2026)

Last updated: 26 September 2026

Microsoft Enterprise Mobility + Security (EMS) E5 is a bundle of Microsoft’s advanced identity, device and data-protection tools. It is designed to sit alongside Office 365, adding stronger security controls around who can sign in, which devices can connect and how sensitive information is handled.

What does EMS E5 include?

• Microsoft Entra ID P2 (formerly Azure AD Premium P2): multi-factor authentication, Conditional Access, risk-based sign-in protection and Privileged Identity Management.
• Microsoft Intune: device and app management. Since July 2026 this includes Intune Plan 2, Remote Help and Advanced Analytics. Read our Intune overview.
• Microsoft Purview Information Protection (formerly Azure Information Protection): sensitivity labels and encryption for documents and emails.
• Microsoft Defender for Cloud Apps (formerly Cloud App Security): visibility and control over the cloud services your staff use.
• Microsoft Defender for Identity: detects suspicious activity against on-premises Active Directory.

What EMS E5 does not include

EMS E5 does not include Microsoft Defender for Office 365 (email phishing and malware protection) or Microsoft Defender for Endpoint. Those come with Microsoft 365 E5, Microsoft 365 Business Premium (Plan 1 versions) or the Microsoft Defender Suite add-on (formerly Microsoft 365 E5 Security). It also does not include Office apps, Exchange or Teams.

Is EMS E5 right for a small or medium business?

For most organisations under 300 users, EMS E5 is not the best-value route. Microsoft 365 Business Premium already includes Entra ID P1, Intune, Defender for Business and Defender for Office 365 Plan 1. Where more protection is needed, Microsoft now offers the Microsoft Defender Suite for Business Premium add-on (formerly called Microsoft 365 E5 Security). It adds Entra ID P2, Defender for Endpoint Plan 2, Defender for Office 365 Plan 2, Defender for Identity and Defender for Cloud Apps.

UK pricing guide

Typical UK list prices, per user, excluding VAT (annual commitment):

• Microsoft 365 Business Premium: £16.90 per month (unchanged in the July 2026 price rise)
• Microsoft Defender Suite for Business Premium: £92.40 per year (about £7.70 per month)
• Microsoft Defender and Purview Suites for Business Premium (combined): £138 per year
• Microsoft Defender Suite for Microsoft 365 E3: £110.40 per year

Monthly-commitment licences cost about 20% more. Microsoft changes prices regularly, so ask us for a current quote for your organisation.

EMS E5 tends to suit larger organisations that license Office 365 E3 separately and need advanced identity and data protection without moving to full Microsoft 365 E5.

Frequently asked questions

Is EMS E5 still available in 2026?

Yes. Microsoft still sells EMS E5, and in 2026 it gained extra Intune capabilities at no additional cost.

Does EMS E5 help with Cyber Essentials?

Its MFA, device management and access controls support several Cyber Essentials requirements, but certification depends on how the tools are configured and applied to every device and account in scope.

Get independent licensing advice

Microsoft licensing changes regularly. ABCOM reviews what you pay for, what you actually use and where the security gaps are, then recommends the most cost-effective combination. Contact our team or see our cyber security services.