Builds on EMS E3 with advanced identity and threat protection: Entra ID P2 (risk-based Conditional Access, Identity Protection, Privileged Identity Management), Azure Information Protection P2, and Microsoft Defender for Cloud Apps. The more comprehensive security tier included in Microsoft 365 E5, adding proactive, automated threat detection and governance on top of E3’s baseline controls.