Worldpanel’s upcoming separation from Kantar requires a robust Microsoft 365 environment that maintains security, compliance, and productivity at Kantar’s service levels or better. Microsoft 365 E3 and E5 are enterprise licensing options that provide the necessary collaboration and productivity tools; however, E5 includes everything in E3 plus advanced security, compliance, analytics, and communication features.
Given Worldpanel’s planned tooling (e.g. advanced threat protection, endpoint management, and data governance), the enhanced capabilities of E5 closely align with the project’s operational needs. E5’s additional features such as advanced threat protection, Microsoft Defender security suite, premium compliance (Purview) tools, Power BI analytics, and Teams Phone system would significantly bolster Worldpanel’s standalone IT environment.
While E5 comes at a higher cost, it can reduce reliance on third-party security tools and mitigate risks, thereby providing value by safeguarding Worldpanel’s data and operations during and after the divestiture. The following analysis details the differences between E3 and E5, maps E5-only features to Worldpanel’s needs, and provides justification and recommendations for the optimal licensing strategy.
Feature Comparison Table (E3 vs E5)
The table below highlights the key differences in features, services, and compliance capabilities between Microsoft 365 E3 and E5. Both plans include core Office apps, Exchange email, SharePoint/ OneDrive, Teams for collaboration, and Windows 11 Enterprise for endpoints. The differentiators lie in the security, compliance, analytics, and communications enhancements exclusive to E5:
Feature/Capability | M365 E3 | M365 E5 |
Core Productivity Apps (Office suite,Teams, SharePoint, OneDrive, etc.) | Yes – Full Office apps (desktop & web), Exchange Online, SharePoint, OneDrive, Teams included 4 . | Yes – (Same as E3) All E3 core apps and services included. |
Windows 10/11 Enterprise OS | Yes – Included (supports modern management and security). | Yes – Included (identical OS benefits as E3)
. |
Device & App Management
(Intune, Mobile Device Mgmt) |
Yes – Via Enterprise Mobility + Security E3 (Intune, Azure AD P1) included. | Yes – Via EMS E5 (Intune plus advanced identity management). |
Security – Identity (Azure AD Premium) | Azure AD P1 – Basic Conditional Access, MFA, SSO. | Azure AD P2 – Adds risk-based Conditional Access and Privileged Identity Management . Enables advanced identity protection and just-in-time admin access. |
Feature/Capability | M365 E3 | M365 E5 |
Security – Endpoint Protection | Defender Antivirus (built-in Windows AV) only; no EDR. | Defender for Endpoint (EDR) – Advanced endpoint detection & response across devices (alerts, threat hunting, vulnerability management). |
Security – Email & Office Threat Protection | Standard protection – Exchange Online Protection (anti-spam/ basic malware scanning). | Defender for Office 365 – Advanced Threat Protection (safe links, safe attachments, phishing detection) . Includes attack simulation training and enhanced threat intelligence. |
Security – Cloud App Security | No – Not included by default. | Defender for Cloud Apps (CASB) – Cloud app discovery and session control to secure SaaS usage. |
Security – Identity Threat Protection | No – Not included. | Defender for Identity – Monitors on-prem AD signals to detect identity-based attacks (lateral movement, DC exploits). |
Security – Unified Incident & XDR | No – Limited to separate tool alerts. | Microsoft 365 Defender (XDR) – Unified portal correlating incidents across email, endpoint, identity, and apps for faster response. |
Compliance – Data Classification & Protection | Purview Info Protection (Plan 1) – Manual sensitivity labelling, basic Data Loss Prevention (DLP) for email/SharePoint. | Purview/AIP Plan 2 – Automatic classification & encryption of sensitive data, enhanced DLP (incl. Endpoint DLP) . Provides auto-labelling, content scanning for sensitive info, and policy enforcement on devices. |
Compliance – eDiscovery & Audit | Core eDiscovery – Basic content search and litigation hold; Audit log retention ~90 days. | Advanced eDiscovery – Case management, legal hold, analytics, reviewer workflows. Advanced Audit – 1 year (or more) audit log retention and forensic event logs, aiding investigations. Customer Lockbox – Included, requiring explicit approval for Microsoft support access to content. |
Compliance – Insider Risk & Compliance Mgmt | No – Not included (limited to basic audit/DLP). | Insider Risk Management – Detect and manage insider threats (e.g. data exfiltration patterns). Communication Compliance – Monitor and remediate inappropriate or sensitive communications in Teams/ Exchange. Privileged Access Management (PAM) – Just-in-time admin access within M365 (for Exchange/SharePoint) to control admin actions (E5 exclusive). |
Analytics & BI | Basic analytics – Personal productivity analytics (MyAnalytics/Viva Insights
[personal edition]) included, no enterprise BI. |
Power BI Pro – Organization-wide business analytics included, enabling data visualization and sharing of reports. Advanced Workplace Analytics (Viva Insights [advanced]) – Organisational productivity and collaboration insights for managers (included in E5). |
Feature/Capability | M365 E3 | M365 E5 |
Communication & Voice | Standard Teams –
Meetings/chat for up to 300 attendees; Audio Conferencing add-on required for dial-in numbers. No Phone System (VoIP PBX) included by default. |
Teams Audio Conferencing – Included (dial in numbers for meetings, up to 1,000 phone attendees). Teams Phone System (Cloud PBX) – Included, enabling PBX capabilities in Teams (user call management, needed if adding PSTN calling plans). Facilitates enterprise voice without third-party PBX. |
Licensing Cost (indicative) |
~$35 USD/user/month (list price) – Lower cost tier. | ~$57 USD/user/month (list price) – Higher premium tier. |
Relevance of E5-Only Features to Worldpanel’s Tooling and Services
Worldpanel (Numerator International) has identified a suite of tools and operational needs for the postseparation environment, many of which align with Microsoft 365 E5’s exclusive features. The table below maps the additional E5 features (not in E3) to Worldpanel’s planned tooling and requirements (as noted in the Project Charter and related planning documents):
E5-Only Feature | Description & Benefit | Worldpanel Context & Needs |
Microsoft Defender for Endpoint (MDE) – Endpoint Detection & Response | Advanced endpoint security that detects, investigates, and responds to threats on desktops and laptops. Includes real-time EDR alerts, threat analytics, and built-in endpoint vulnerability management. | Digital Workplace Security: Worldpanel plans a “DWS Tooling Rollout” including Intune and MDE on all endpoints. E5 provides MDE natively, allowing Worldpanel to protect devices from breaches and monitor endpoint health as they leave Kantar’s network. This replaces or supplements third party endpoint AV, providing integrated breach detection and device risk scoring. |
Microsoft Defender for Office 365 (MDO) – Advanced Threat Protection for Email & Office 365 apps | Protects Exchange Online, SharePoint, OneDrive, Teams from sophisticated attacks. Features Safe Attachments & Safe Links to catch malware/ phishing, anti-spoofing, and attack simulations for user training. | Secure Collaboration & Email: Worldpanel must safeguard email and files in the new tenant from phishing and malware. Kantar’s central protections will be gone, so MDO fills that gap. The Project Charter notes Defender for Office 365 (“MDO”) is already in use at Numerator. Under E5, Worldpanel gets enterprise-grade email threat protection out-of-the-box, ensuring continuity of secure email without buying separate gateways. |
Microsoft Defender for Cloud Apps (Defender CASB) – Cloud App Security Broker | Monitors and controls usage of cloud applications, providing visibility into Shadow IT and protecting data across third-party apps via conditional access and policies. | Cloud App Visibility: As Worldpanel becomes independent, users may adopt various SaaS tools. Defender for Cloud Apps (included in E5) allows IT to discover cloud app usage and enforce policies (e.g., block unsanctioned apps or prevent data download), complementing Worldpanel’s security monitoring. This helps maintain governance over cloud services similar to or better than what existed under Kantar. |
Microsoft Defender for Identity – Identity Threat Protection | Analyses on-premises Active Directory signals to detect identity-focused attacks (e.g. Pass-the-Hash, privilege escalation). Often used in hybrid environments to protect AD during cloud transition. | AD Security During Transition: If Worldpanel retains any on-prem AD or hybrid identity during separation, Defender for Identity (in E5) identifies suspicious activities targeting accounts or domain controllers. This is critical if Kantar’s SOC monitoring falls away. It complements Kyndryl’s SOC by adding deep AD telemetry to prevent unseen attacks on the directory as it’s integrated with Numerator. |
E5-Only Feature | Description & Benefit | Worldpanel Context & Needs |
Azure AD Premium P2 (Microsoft Entra ID P2) – Advanced Identity Management | Offers Privileged Identity Management (PIM) for just-in-time admin access and oversight, and Identity Protection (risk-based conditional access, detection of leaked credentials or unusual login behaviour). | Privileged Access & Authentication: The project requires a Privileged Access Management solution – E5’s P2 license provides this natively via PIM. Worldpanel can enforce that elevated admin roles (for Exchange, SharePoint, Azure AD, etc.) are only active when approved, reducing risk of misuse. P2’s Identity Protection adds another layer by automatically flagging risky sign-ins or compromised accounts, which is vital as Worldpanel users transition off Kantar’s network controls. |
Microsoft Purview (Compliance Suite) –Advanced Data Governance | A set of E5 compliance tools including Azure Information Protection (AIP) Plan 2 for auto-classification of sensitive info, Data Loss Prevention (DLP) across endpoints (Windows 11/10, etc.), Records Management & Retention policies (beyond standard), and Content Encryption tied to labels. | Protecting Sensitive Data: Worldpanel will handle Kantar-originated data and new data that must be governed under Numerator. E5’s Purview features allow automatic encryption or restriction of files containing Kantar IP or personal data, preventing accidental leaks during separation. For instance, if Worldpanel employees handle confidential consumer data, AIP Plan 2 can auto-label and encrypt those files. Endpoint DLP (exclusive to E5) helps prevent users from copying sensitive files to USB or personal email, an important safeguard in a divestiture when data exfiltration risks are higher. |
Microsoft Purview – Insider Risk Management | Machine-learning driven analytics to detect insider risks, such as data exfiltration, IP theft, or policy violations by employees. Provides alerts and workflows for investigation/ remediation. | Separation Risk Mitigation: During divestiture, the risk of insider incidents (either inadvertent or malicious) can increase. Insider Risk Management in E5 gives Worldpanel a tool to catch unusual activities (e.g. someone downloading large amounts of data or emailing confidential lists outside the company) and take action. This capability was not implemented under Kantar but is “on the radar” for Numerator; adopting E5 would jump-start Worldpanel’s ability to monitor and manage such risks proactively. |
Advanced eDiscovery & Audit | Allows creation of legal cases, application of holds, and advanced searches across M365 data (email, Teams, documents). Extends audit log retention to 1 year with detailed activity tracking. Customer Lockbox ensures Microsoft needs approval before accessing any content. | Post-separation, Worldpanel must independently manage legal and regulatory requests. E5’s Advanced eDiscovery enables efficient data retrieval for audits or litigation, while extended audit logs support investigations during the transition. Customer Lockbox ensures no third-party access without explicit approval, reinforcing strong data governance. |
E5-Only Feature | Description & Benefit | Worldpanel Context & Needs |
Teams Phone System & Audio Conferencing | Enterprise telephony features enabling call routing, auto-attendants, and PSTN connectivity through Microsoft Teams. Audio Conferencing provides dial-in numbers for meetings. (Both included in E5; E3 requires separate purchase). | Communication & Collaboration
Independence: In separating from Kantar, Worldpanel must establish its own voice and conferencing setup. E5’s inclusion of Teams Phone System means Worldpanel can set up a cloud-based phone system for users (e.g., replacing any Kantar PBX or Skype for Business legacy systems). It provides flexibility to add calling plans or direct routing for external calls without buying additional PBX licenses. Audio Conferencing in E5 ensures that even after separation, employees and clients can join meetings via phone dial-in, which is especially useful if some stakeholders are not yet on the new tenant’s Teams. This supports continuity of global meetings and large all-hands calls (up to 1,000 attendees dial-in), matching or exceeding Kantar’s prior capabilities for enterprise communications. |
Power BI Pro (Analytics and Reporting) | Cloud-based business intelligence platform for data analysis and interactive reporting. Allows users to create and share dashboards and reports across the organisation | Data-Driven Decision Making: Worldpanel’s IT and business teams will need insights into usage, operations, and financials in the new environment (e.g., tracking M365 service adoption, license utilisation, or building reports for business metrics). With E5 including Power BI Pro, every user can access or be assigned interactive reports. For example, the M365 Reporting & Analytics role identified in planning can use Power BI to aggregate tenant usage statistics and share them with leadership easily, without requiring separate BI licenses. This fosters a data driven culture in the new standalone Worldpanel, aligning with the goal of leveraging analytics post-separation. |
Table 2: Mapping of E5-Exclusive Features to Worldpanel’s Planned Tools/Needs. As shown above, the tools and services Worldpanel intends to deploy (e.g. MDE, MDO, Purview compliance, PAM/PIM, etc.) are inherently part of the Microsoft 365 E5 license. By choosing E5, Worldpanel gains a comprehensive toolkit that directly supports its security, compliance, and operational requirements in the divestiture context. Notably, Kyndryl’s charter highlighted decisions around licensing (e.g. considering “E5”) and listed Numerator’s use of these advanced Microsoft tools, adopting E5 ensures Worldpanel can fully leverage these capabilities without piecemeal add-ons or third-party products. In short, E5 aligns Worldpanel’s Microsoft 365 platform with its target state architecture, delivering integrated solutions for endpoint management, threat protection, data governance, and communications as Worldpanel transitions to an independent environment.
Value Justification for E5 Upgrade
Continuation of the Microsoft E5 Licensing represents a significant investment, but for Worldpanel’s separation scenario the value is compelling. Key justifications include:
- Unified Security Posture: E5 provides an end-to-end security ecosystem that can replace several disparate tools. Instead of relying on Kantar’s security infrastructure or purchasing third-party solutions for endpoint security, email filtering, CASB, etc., Worldpanel can use E5’s built-in Microsoft Defender suite. This not only ensures tight integration (common dashboards, correlated alerts) but can also reduce costs in the long run by eliminating separate licenses for third-party products. For example, E5’s Defender for Endpoint could offset the need for a separate anti-malware/EDR product (and it integrates with Azure AD and Intune), and Defender for Office 365 replaces or augments any legacy email security gateways. The integrated approach improves response times to threats (thanks to Microsoft 365 Defender XDR correlation) a crucial factor when Worldpanel’s IT team, possibly smaller than Kantar’s, must handle threats independently.
- Compliance and Risk Mitigation: In a divestiture, handling of sensitive data and regulatory compliance is under intense scrutiny. E5’s advanced compliance tools help Worldpanel avoid legal and financial risks by proactively governing data. Advanced eDiscovery and audit logs mean that if any dispute or investigation arises related to data during the transition, Worldpanel can respond defensively with full audit trails and rapidly retrieve needed information. The cost of non-compliance (fines, legal costs) or a data breach could far exceed the incremental license cost of E5. Furthermore, Insider Risk Management and DLP reduce the chance of a costly data leak during the transition, providing peace of mind to executives that trade secrets and personal data won’t slip through the cracks unnoticed. These features demonstrate to Worldpanel’s clients and regulators that the new entity is taking data governance seriously, which is invaluable for trust and compliance post-separation.
- Continuity of Service and User Experience: A mandate of the separation is to maintain the “same level of services” for end-users. E5 ensures that Worldpanel employees continue to enjoy a seamless digital workplace with enhanced protection. For instance, with E5’s Teams Phone and Audio Conferencing, users will still have rich meeting and calling capabilities akin to what they had under Kantar. This minimises disruption, critical for business continuity, and means no additional vendors or complex integrations are needed for telephony. Power BI Pro availability to all users encourages a culture of self-service analytics, which can drive efficiency and innovation in the newly formed company. In essence, E5 helps Worldpanel hit the ground running as an independent company, with top-tier tools readily available rather than rolling out new point solutions later.
- Total Cost of Ownership (TCO) Considerations: Although E5 licenses are more expensive per user, the TCO when accounting for all included functionality can be favourable. Worldpanel would be purchasing a bundle of solutions in E5 that, if acquired separately, might cost more and would incur integration overhead. According to industry guidance, the advanced features in E5 can lead to significant cost savings by reducing the need for third-party security solutions and streamlining processes. Additionally, having Microsoft provide a one-stop platform can lower management overhead (fewer consoles to manage, less training needed for IT staff on multiple systems). Worldpanel’s IT team, with Kyndryl’s support, can focus on one ecosystem speeding up the deployment during the tight separation timeline (targeted by March 2026) instead of dealing with multiple vendors. This agility and simplicity are valuable in a fast-paced transition project.
- Strategic Alignment and Future-Proofing: Numerator and Kyndryl’s plan for Worldpanel likely involves modern, cloud-first IT principles (Zero Trust security, data-driven decision making, agile working). E5 licenses inherently support these strategic goals e.g., Azure AD P2 enabling Zero Trust identity security, and cloud-native tools like Defender, Purview, and Power BI fostering a modern workplace. By choosing E5, Worldpanel aligns with Microsoft’s top-tier offerings, positioning the company to adopt new innovations (such as Microsoft’s AI features or enhanced security updates) more readily. This future-proofing means Worldpanel’s digital workplace will remain resilient and up-to-date, an important consideration given the long-term nature of the separation program (service agreements up to 2031 in the plan). In short, E5 is not just about immediate needs, but about equipping Worldpanel with a platform that can scale and evolve as the company grows after separation.
Which Plan Should Your Organisation Choose?
Based on the above analysis, it is recommended that Worldpanel continue to invest in Microsoft 365 E5 licenses for the post-separation tenant. The E5 plan directly addresses the advanced security and compliance requirements identified for the separation, and it provides feature parity (or improvements) with any services previously provided under Kantar. This will enable Worldpanel to operate independently without compromising on security or productivity. Key recommendations and considerations are:
- Adopt E5 for Core User Base: Equip the majority of Worldpanel users with E5 licenses to ensure that security and compliance features are universally applied. This ensures no gaps in protection, every user’s email, devices, and data would be covered by advanced threat protection and governance policies. Given Worldpanel’s size and enterprise nature, the broad deployment of E5 is justified by the high level of risk and the need for consistent capabilities across the organisation.
- Leverage Included Tools to Replace Legacy Solutions: Take full advantage of E5’s toolset to replace what was formerly provided by Kantar or third parties. For example, implement Defender for Endpoint and Defender for Office 365 immediately for endpoint and email security (retiring any stop-gap antivirus or email filters from the interim). Use Purview compliance features to establish Worldpanel’s data classification, retention, and DLP policies from day one, rather than investing in separate compliance software. This will streamline the migration process and reduce dependency on any Transitional Service Agreements. Kyndryl can assist in quickly configuring these E5 features in line with Worldpanel/Numerator policies.
- Provide Training and Change Management: Ensure that both IT administrators and end-users are prepared to use the new E5-powered capabilities. Admins will need training on the Microsoft 365 Defender portal, Compliance centre (Purview), and PIM for managing privileged access. End users should be made aware of new security measures (e.g., they might receive simulated phishing tests via Defender for Office 365, or see sensitivity labels on documents). Emphasize that these tools are in place to protect the business during the transition and beyond. A well-informed team will better utilise features like Power BI Pro for analytics or compliance labels for data handling, maximising the return on the E5 investment.
- Consider E5 Add-ons or Mix for Specialised Needs: While a full E5 license rollout is recommended, Worldpanel can refine the approach to optimise costs. Microsoft allows mixing E3 and E5 licenses, so Worldpanel could give E5 only to users or departments handling the most sensitive data or roles (e.g., IT admins, legal, finance), and assign E3 to others. However, given the broad relevance of features like security and DLP, a mixed approach might introduce complexity and potential coverage gaps. Another angle is using E5 Security or E5 Compliance add-on packs on top of E3 for certain users, for instance, if every user needs the security features but only compliance officers need advanced eDiscovery. Worldpanel’s leadership should review the detailed licensing costs and perhaps consult Microsoft or licensing partners to see if an optimised combination could yield savings while still meeting requirements. Any deviation from full E5 should be mapped carefully to ensure no critical feature (such as device ATP or audit log retention) is lost for a subset of users.
- Monitor and Re-Evaluate Post-Separation: After the separation is executed and Worldpanel is operating on its new tenant, continuously monitor the utilisation and benefits of E5 features. Use the included analytics (e.g., security reports, compliance dashboards, Power BI adoption metrics) to demonstrate the value being realised such as threats prevented, time saved in eDiscovery searches, or reduction in incidents. This data will help validate the E5 investment to stakeholders and can inform future license decisions. If certain E5 features remain under-used, Worldpanel could adjust licensing in the future (for example, if after a year it’s found that a particular department doesn’t require E5, those could be downgraded to E3). The initial recommendation, however, is to start with the full capabilities to leave no blind spots during the critical transition period and then optimise later if needed.
Conclusion
Microsoft 365 E5 aligns strongly with Worldpanel’s divestiture goals by providing an all-in-one solution for a secure, compliant, and efficient digital workplace. It ensures Worldpanel’s new Microsoft 365 tenant is not just a copy of the old environment, but an enhanced platform that empowers the business to move forward with confidence after separating from Kantar. While the cost is higher, the benefits in risk reduction, operational capability, and long-term agility make E5 a prudent investment in the context of this strategic separation. Implementing E5 as part of the migration plan will help Worldpanel achieve a smooth transition with minimal reliance on legacy systems or stopgap measures, thereby fulfilling the project’s guiding principle of a clean and self-sufficient separation.
Next Steps – Get Expert Microsoft 365 Support
Choosing between Microsoft 365 E3 and E5 is more than just a cost decision, it’s about aligning the right tools with your organisation’s security, compliance and productivity needs.
At LB Tech Solutions, we help businesses assess, deploy and optimise Microsoft 365 to get the best return on investment. Whether you need advanced security from E5 or a solid foundation with E3, our experts will guide you through the process.
👉 Book a free consultation today to discover which Microsoft 365 plan is the right fit for your organisation.