{"id":70678,"date":"2026-01-07T13:26:06","date_gmt":"2026-01-07T12:26:06","guid":{"rendered":"https:\/\/www.schneider.im\/?p=70678"},"modified":"2026-04-24T11:33:39","modified_gmt":"2026-04-24T09:33:39","slug":"microsoft-365-e5-security-copilot-now-included","status":"publish","type":"post","link":"https:\/\/www.schneider.im\/lu\/microsoft-365-e5-security-copilot-now-included\/","title":{"rendered":"Microsoft 365 E5: Security Copilot now included"},"content":{"rendered":"<p style=\"text-align: justify;\"><strong>Effective January 1, 2026, Microsoft Security Copilot is now included with Microsoft 365 E5<\/strong>. Microsoft has updated its Product Terms to reflect that <strong>all Microsoft 365 E5 subscribers gain access to Microsoft Security Copilot<\/strong>, with a <strong>monthly allocation of Security Compute Units (SCUs)<\/strong> included as part of the subscription. In practical terms, this means organizations with an E5 license can use Security Copilot\u2019s AI-powered security features <strong>at no extra licensing cost<\/strong> under their existing Microsoft 365 E5 agreements. This inclusion is designed to make advanced, AI-driven security capabilities more readily available and easier to adopt for Microsoft 365 E5 customers.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-70680\" src=\"https:\/\/www.schneider.im\/media\/2026\/01\/SCHNEIDER-IT-MANAGEMENT-2026-01-05-Update-Microsoft-365-E5-Security-Copilot-now-included-800x436.png\" alt=\"\" width=\"800\" height=\"436\" srcset=\"https:\/\/www.schneider.im\/media\/2026\/01\/SCHNEIDER-IT-MANAGEMENT-2026-01-05-Update-Microsoft-365-E5-Security-Copilot-now-included-800x436.png 800w, https:\/\/www.schneider.im\/media\/2026\/01\/SCHNEIDER-IT-MANAGEMENT-2026-01-05-Update-Microsoft-365-E5-Security-Copilot-now-included-500x272.png 500w, https:\/\/www.schneider.im\/media\/2026\/01\/SCHNEIDER-IT-MANAGEMENT-2026-01-05-Update-Microsoft-365-E5-Security-Copilot-now-included-150x82.png 150w, https:\/\/www.schneider.im\/media\/2026\/01\/SCHNEIDER-IT-MANAGEMENT-2026-01-05-Update-Microsoft-365-E5-Security-Copilot-now-included-768x418.png 768w, https:\/\/www.schneider.im\/media\/2026\/01\/SCHNEIDER-IT-MANAGEMENT-2026-01-05-Update-Microsoft-365-E5-Security-Copilot-now-included-1536x837.png 1536w, https:\/\/www.schneider.im\/media\/2026\/01\/SCHNEIDER-IT-MANAGEMENT-2026-01-05-Update-Microsoft-365-E5-Security-Copilot-now-included-2048x1115.png 2048w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\">What is Microsoft Security Copilot?<\/h2>\n<p style=\"text-align: justify;\">Microsoft Security Copilot is a <strong>generative AI-powered security assistant<\/strong>. It helps cybersecurity teams <strong>detect, analyze, and respond to threats faster<\/strong> by combining a specialized large language model with Microsoft\u2019s extensive security expertise and threat intelligence. In practice, Security Copilot integrates with Microsoft\u2019s security ecosystem \u2013 for example, it works alongside tools like <strong>Microsoft Defender, Entra, Intune, and Purview<\/strong> \u2013 to gather signals and provide insights within the flow of everyday security workflows. Security analysts can interact with Copilot in plain English, asking questions or requesting summaries of incidents, and the tool will generate useful, contextual answers or recommendations. By leveraging Microsoft\u2019s global threat intelligence, Security Copilot can offer up-to-date insights on emerging threats and help assess an organization\u2019s security posture quickly. In short, it acts as an AI copilot for security professionals, assisting with everything from incident investigation to proactive threat hunting, in an easy-to-use conversational interface.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\">Licensing<\/h2>\n<p style=\"text-align: justify;\">Under the new licensing terms, <strong>Microsoft 365 E5 now includes Security Copilot as a built-in entitlement<\/strong>. E5 customers do <strong>not need to purchase a separate license<\/strong> or add-on for Security Copilot \u2013 it\u2019s part of the E5 package effective Jan 1, 2026. Along with the service itself, Microsoft provides a base amount of usage capacity in the form of <strong>Security Compute Units (SCUs)<\/strong> each month as part of Microsoft 365 E5:<\/p>\n<ul style=\"text-align: justify;\">\n<li><strong>Included SCU Allocation:<\/strong> Every organization with Microsoft 365 E5 receives a <strong>monthly pool of SCUs<\/strong> to cover Security Copilot\u2019s workload. The allocation is scaled to the tenant\u2019s user count. <strong>Microsoft provides 400 SCUs per month for every 1,000 E5 users<\/strong> (pro-rated for different numbers of users), up to a maximum of <strong>10,000 SCUs per month included<\/strong> at no additional cost. For example, a company with 500 E5 users would get 200 SCUs per month, while one with 5,000 users would get 2,000 SCUs per month, from Microsoft. This included capacity is designed to support common usage scenarios of Security Copilot for most organizations.<\/li>\n<li><strong>What is an SCU:<\/strong> A <strong>Security Compute Unit <\/strong>(SCU) is a unit of cloud compute resource for Security Copilot. It represents the amount of AI processing power needed to run Copilot tasks. In practical terms, consuming one SCU could correspond to roughly a certain number of AI prompts or analyses. Microsoft has indicated roughly ~10 workflows per day per SCU as a rough metric, though actual usage will vary. <strong>SCUs are the basis of Security Copilot\u2019s consumption model<\/strong> \u2013 previously, customers had to buy SCUs to use Copilot. Now Microsoft 365 E5 includes a chunk of SCUs so you can use Copilot without worrying about immediate charges. If you stay within the included monthly SCU pool, there\u2019s no extra cost.<\/li>\n<li><strong>SCU Usage and Overage:<\/strong> The included SCU pool <strong>resets each month<\/strong> \u2013 unused units do <strong>not<\/strong> roll over to the next month. If an organization\u2019s usage exceeds the monthly included SCUs, additional SCUs would require a separate purchase (i.e., moving into a paid consumption model for the overage). However, the generous included amounts (e.g. 400 per 1,000 users) aim to cover typical needs. This change to an included model gives E5 customers more <strong>predictable costs<\/strong> and the freedom to experiment with Security Copilot\u2019s capabilities <strong>without incurring surprise fees<\/strong>. Organizations not on E5 can still access Security Copilot, but they would continue with the original consumption-based licensing model purchasing the needed SCUs separately.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-56340\" src=\"https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8654-800x533.jpg\" alt=\"\" width=\"800\" height=\"533\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8654-800x533.jpg 800w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8654-500x333.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8654-150x100.jpg 150w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8654-768x512.jpg 768w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8654-1536x1024.jpg 1536w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8654-2048x1365.jpg 2048w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\">Next steps<\/h2>\n<p style=\"text-align: justify;\"><strong>SCHNEIDER IT MANAGEMENT\u2019s licensing experts<\/strong> recommend reviewing your current Microsoft 365 licensing to understand the impact of this inclusion. Since Security Copilot is now an entitlement in E5, you should ensure your licenses are correctly provisioned to take advantage of it. The included SCU capacity should cover most use cases.<\/p>\n<p style=\"text-align: justify;\"><strong>\u00a0<\/strong><\/p>\n<h2 style=\"text-align: justify;\">More Information<\/h2>\n<p style=\"text-align: justify;\">For more details about this update, you can refer to the <strong>official Microsoft sources<\/strong>:<\/p>\n<ul style=\"text-align: justify;\">\n<li><strong>Microsoft Product Terms \u2013 January 2026<\/strong> edition (see the \u201cMicrosoft 365\u201d section for the clause on Security Copilot inclusion). Original text: <em>\u201cSecurity Copilot is now included with Microsoft 365 E5. A clause was added to specify the Microsoft 365 E5 subscription provides access to Security Copilot, along with a monthly allocation of Security Compute Units.\u201d<\/em> (Source: Microsoft Product Terms, Jan 1, 2026) \u2013 available at <a href=\"https:\/\/www.microsoft.com\/licensing\/terms\"><em>https:\/\/www.microsoft.com\/licensing\/terms<\/em><\/a> (select <strong>Product Terms<\/strong> for January 2026).<\/li>\n<li><strong>Microsoft documentation \u2013 \u201cLearn about Security Copilot inclusion in Microsoft 365 E5\u201d<\/strong>. This Microsoft Learn article provides an overview of the rollout timeline, licensing specifics, and FAQs about Security Copilot being added to E5 (e.g. how the SCU allocation scales, eligibility, etc.). It\u2019s a helpful resource for understanding the practical implications. (Source: Microsoft Learn, <em>Security Copilot inclusion in M365 E5<\/em>) \u2013 <a href=\"https:\/\/learn.microsoft.com\/en-us\/copilot\/security\/security-copilot-inclusion\"><em>https:\/\/learn.microsoft.com\/en-us\/copilot\/security\/security-copilot-inclusion<\/em><\/a><\/li>\n<li><strong>Message Center announcement: <a href=\"https:\/\/admin.cloud.microsoft\/?#\/MessageCenter\/:\/messages\/MC1261596\">https:\/\/admin.cloud.microsoft\/?#\/MessageCenter\/:\/messages\/MC1261596<\/a>.<\/strong><\/li>\n<\/ul>\n<p style=\"text-align: justify;\">For our <strong>Microsoft page<\/strong>, please visit: <a href=\"https:\/\/www.schneider.im\/software\/microsoft\/\">https:\/\/www.schneider.im\/software\/microsoft<\/a>.<\/p>\n<p style=\"text-align: justify;\">Please <a href=\"https:\/\/www.schneider.im\/contact\/\">contact us<\/a> for <strong>expert services<\/strong> on your specific Microsoft software and online services requirements and to <strong>request a quote today<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Effective January 1, 2026, Microsoft Security Copilot is now included with Microsoft 365 E5. Microsoft has updated its Product Terms to reflect that all Microsoft 365 E5 subscribers gain access to Microsoft Security Copilot, with a monthly allocation of Security Compute Units (SCUs) included as part of the subscription. In practical terms, this means organizations [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":33016,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[288,671,645],"tags":[],"class_list":["post-70678","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-365","category-microsoft-copilot","category-microsoft-security"],"_links":{"self":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/70678","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/comments?post=70678"}],"version-history":[{"count":5,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/70678\/revisions"}],"predecessor-version":[{"id":73139,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/70678\/revisions\/73139"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/media\/33016"}],"wp:attachment":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/media?parent=70678"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/categories?post=70678"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/tags?post=70678"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}