Executive Summary

K-12 school systems face rising cyberthreats, ransomware attacks, and compliance requirements while operating with limited budgets and lean IT security teams. They also need secure, AI-powered tools that can streamline operations and support innovative learning experiences. Microsoft 365 A5 can offer advanced security, compliance, analytics, management, and productivity capabilities to help schools protect people, data, and resources, simplify their technology environments, and enable modern AI, while improving teaching and student outcomes.

Microsoft 365 Education provides tools that can support secure, collaborative, and productive learning environments. The Microsoft 365 A5 license can provide advanced security, compliance, analytics, management, privacy, and productivity capabilities to help institutions protect data, simplify administration, and support better learning outcomes.

Microsoft commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study and examine the potential return on investment (ROI) K-12 school systems may realize by deploying Microsoft 365 A5.1 The purpose of this study is to provide readers with a framework to evaluate the potential financial impact of 365 A5 on their organizations based on the solution capabilities, license bundles, and pricing at the time this study was written.

181%

Return on investment (ROI)

 

$821K

Net present value (NPV)

 

To better understand the benefits, costs, and risks associated with this investment, Forrester interviewed six decision-makers and surveyed 64 respondents from K-12 education institutions with experience using 365 A5. For the purposes of this study, Forrester aggregated the experiences of the interviewees and survey respondents and combined the results into a single composite organization, which is a midsized K-12 school system with approximately 7,500 students and 1,250 employees.

Before adopting Microsoft 365 A5 and replacing selected point security and compliance tools, interviewees reported challenges in maintaining security, privacy, and compliance amid increasing requirements for online availability and the rising use of AI. These gaps contributed to costly incidents, including investigation and recovery efforts and operational disruption. Budget constraints also meant existing security stacks sometimes failed to meet minimum cyber insurance requirements.

After investing in Microsoft 365 A5, interviewees consolidated security tools and strengthened protection across their campuses and digital environments. Key results included improved security, lower licensing costs through vendor consolidation, and efficiency gains for IT, teachers, and staff. Students benefited from flexible online learning options and access to AI through Microsoft Copilot Chat.

Key Findings

Quantified benefits. Three-year, risk-adjusted present value (PV) quantified benefits for the composite organization include:

  • Reduced license costs from vendor consolidation. Moving from multiple security, privacy, and compliance tools to Microsoft 365 A5 delivers integrated solutions for the composite organization that align with industry best practices and meet or exceed cyber insurance requirements. Consolidating vendors also lowers total licensing, subscription, and maintenance costs. Over three years, these savings are worth close to $76,000.

  • Strengthened security. Consolidating on Microsoft 365 A5 strengthens security, compliance, and privacy across the composite organization and its digital resources. As compared with the prior solutions, significant multisystem breaches drop by 20% for the composite organization and remediation costs, including fines and audit expenses, for remaining incidents fall by 25%. Over three years, these improvements provide over $776,000 in savings.

  • Efficiency gains which reduce future IT security team growth. Microsoft 365 A5 provides unified security tools in a single console for the composite organization, enabling real-time visibility, faster analysis, and quicker remediation of threats. This consolidation reduces complexity, eliminates prior solutions, and allows the composite’s existing IT security team to handle growing attack volumes without expanding staff by the 50% they would have otherwise planned to add. As a result, the composite organization saves $161,000 in labor over three years — a critical advantage given the challenges of hiring and retaining IT security professionals.

  • Reduced employee downtime. Less downtime in the data center as well as through the impact of security incidents leads to time savings for both teachers and staff at the composite organization. For educators, this time savings is redirected to student instruction and preparation. Even after reducing the benefit by a very conservative 75% to account for inefficiencies, the three-year value to the organization is $238,000.

  • Eliminated costs due to Power BI inclusion in the Microsoft 365 A5 license. The composite organization removes costs associated with separate Power BI licenses (included in the Microsoft 365 A5 bundle). The elimination of these licenses saves the composite organization $24,000 over three years.

Unquantified benefits. Benefits that provide value for the composite organization but are not quantified for this study include:

  • Productivity gains through the use of Copilot Chat. The composite organization leverages Copilot Chat across the organization, enhancing productivity for both staff and students. The institution also has the option of licensing Microsoft 365 Copilot for additional benefit, as discussed later in the Flexibility section.

  • Improved security and compliance efforts with Purview. The advanced audit features in Purview allow the composite organization to trace potential security incidents, develop nuanced record retention policies, and support data loss prevention efforts.

  • Additional opportunities through flexible learning models. The composite organization leverages the availability of applications and data to support online teaching and learning, lowering hurdles for faculty, staff, and students.

  • Improved learning experience. Reduced downtime and increased trust in organizational security from staff and students leads to better educational outcomes for the composite organization.

Costs. Three-year, risk-adjusted PV costs for the composite organization include:

  • Internal costs of $247,000. Internal costs are the effort to implement Microsoft 365 A5 and the incremental effort for ongoing management. The initial implementation takes eight months and requires two FTEs. Ongoing management requires 0.5 FTEs.

  • External costs of $206,000. The principal external cost is the incremental annual Microsoft 365 A5 license cost compared to Microsoft 365 A3 based on the commercial terms evaluated during the study period. The model also includes $10,000 in initial external professional services costs for implementation.

The financial analysis that is based on the interviews and survey found that a composite organization experiences benefits of $1.3 million over three years versus costs of $440,000, adding up to a net present value (NPV) of $834,000 and an ROI of 189%. These results reflect the composite organization, deployment assumptions, and commercial terms evaluated during the study period. Actual outcomes will vary based on each institution’s environment, selected offering, deployment scope, and current pricing.

25%

Incremental reduction in the likelihood of a significant breach

“To me, it wasn’t just a cost benefit exercise; having A5’s security features was an essential requirement for modern computing.”

Assistant superintendent of schools, public school system

Key Statistics

181%

Return on investment (ROI) 

$1.3M

Benefits PV 

$821K

Net present value (NPV) 

7 months

Payback 

Benefits (Three-Year)

[CHART DIV CONTAINER]
Reduced license costs from vendor consolidation Strengthened security Avoided additional IT security team member hires Reduced employee downtime Eliminated costs due to Power BI

Figure 1

“Which of the following outcomes do you feel your organization has realized due to adopting Microsoft 365 A5?”

[CHART DIV CONTAINER]
Improved threat protection and security (including identity) posture Lower internal IT costs due to less security and IT team efforts Improved employee satisfaction due to less downtime and less frustration with security-related activities, such as password resets Helped protect against cyberbullying and/or other code-of-conduct voilations Improved visibility across IT environment

Base: 64 IT decision-makers at primary education organizations that use Microsoft 365 A5
Source: A commissioned study conducted by Forrester Consulting on behalf of Microsoft, October 2025

The Microsoft 365 A5 Customer For K-12 Schools Journey

Drivers leading to the 365 A5 investment for K-12 schools

Interviews

Role School Type Region Number Of Students Number Of Employees
Chief information officer Alternative high school
(Grades 9 to 12)
Colorado 7,000 600
Executive director of technology and innovation Independent school
(Pre-K to grade 12)
Texas 7,500 900
Director of technology Private school
(Pre-K to grade 8)
Massachusetts 400 80
Assistant superintendent of schools

Director of information services
Public school
(Kindergarten to grade 12)
British Columbia, Canada 35,000 7100
IT director Public school
(Kindergarten to grade 12)
Illinois 600 75

Key Challenges

Before adopting Microsoft 365 A5, interviewees’ organizations relied on Microsoft 365 A3 alongside third-party security, compliance, and privacy tools, which required custom integrations for monitoring and remediation.

Interviewees noted how their organizations struggled with common challenges, including:

  • A need for additional security capabilities. All interviewees described the drivers toward needing additional cyber security measures in place, including increasingly advanced attacks and stronger compliance requirements, as well as the effort that went into containing and remediating incidents.

  • Inefficiencies associated with multiple solutions. The interviewees said their organizations struggled with integrating and managing different security solutions, due to the additional effort required in understanding the variety of tools as well as the labor required to create a seamless environment.

  • Increasingly stringent requirement for cyber insurance. In order to obtain cyber insurance policies, the interviewees’ institutions needed more robust security toolsets.

Figure 2

Organizational Security Solution Goals

[CHART DIV CONTAINER]
Improved security posture (visibility, reliability) Contain costs related to security, compliance, and indentity technology tools Improved security to better meet privacy requirements Contain costs related to security, compliance, and identity employees Improve educational outcomes by creating learning experiences that are secure and compliant Provide efficiencies for security resources Improve compliance and better meet regulatory requirements, including those related to research grants

Base: 64 IT decision-makers at primary education organizations that use Microsoft 365 A5
Source: A commissioned study conducted by Forrester Consulting on behalf of Microsoft, October 2025

Solution Requirements

The interviewees searched for a solution that could:

  • Provide a cost-effective way to obtain the security functionality required by their organization.

  • Support consolidation to a single provider for cost and management efficiency.

  • Improve learning outcomes through flexible applications and the use of AI.

“The value proposition of A5 for us is security and always has been. It probably always will be the fact I don’t need to do multiple different things on the security side. That’s where the real cost savings generate for us.”

Chief information officer, alternative high school

Composite Organization

Based on the interviews and survey, Forrester constructed a TEI framework, a composite company, and an ROI analysis that illustrates the areas financially affected. The composite organization is representative of the interviewees’ and survey respondents’ organizations, and it is used to present the aggregate financial analysis in the next section. The composite organization has the following characteristics:

  • Description of composite. The composite organization is a midsized school district including elementary, middle, and high schools. The district has a total of 1,250 employees, which includes 500 educators and 750 staff. All employees hold Microsoft 365 A5 licenses. The IT team includes two IT security FTEs.

  • Deployment characteristics. The composite organization upgraded from the Microsoft 365 A3 to A5 and retired previous security solutions now provided by Microsoft. The institution begins using the solution in Year 1, following an eight-month implementation period.

 KEY ASSUMPTIONS

  • Midsized K-12 public school district

  • 7,500 students

  • 500 teachers

  • 750 staff

Analysis Of Benefits

Quantified benefit data as applied to the composite

Total Benefits

Ref. Benefit Year 1 Year 2 Year 3 Total Present Value
Atr Reduced license costs from vendor consolidation $18,647 $37,294 $37,294 $93,234 $75,792
Btr Strengthened security $263,216 $340,320 $340,320 $943,856 $776,231
Ctr Avoided additional IT security team member hires $39,488 $78,975 $78,975 $197,438 $160,501
Dtr Reduced employee downtime $58,570 $117,141 $117,141 $292,852 $238,066
Etr Eliminated costs due to Power BI $9,450 $9,450 $9,450 $28,350 $23,501
  Total benefits (risk-adjusted) $389,371 $583,179 $583,179 $1,555,730 $1,274,091

Reduced License Costs From Vendor Consolidation

Evidence and data. Transitioning from a point-solution integration model to Microsoft 365 A5 helped interviewees’ and survey respondents’ organizations lower licensing costs. They provided the following examples of how these cost reductions were achieved:

  • All interviewees cited the ability to consolidate solutions and eliminate costs as a driver to move to Microsoft 365 A5.

  • The chief information officer of an alternative high school shared: “Limited budgets are the catch. I can spend my A5 cost, set it, and forget it. Otherwise, I have multiple contracts to renew every school year that will consistently go up in price every year, just because that’s what they do.”

  • Beyond the cost savings associated with the move to Microsoft 365 A5, the director of technology at a private school said, “A5 is heavily preferred by the business users.”

  • Survey respondents whose organizations reduced external vendor costs cited reductions in a combination of subscription, maintenance, and hardware costs.

Modeling and assumptions. Based on the interviews and survey, Forrester assumes the following about the composite organization:

  • Prior to moving to Microsoft 365 A5, the composite organization’s cost for the prior security, compliance, and privacy solutions was 30% higher than the total Microsoft 365 A5 license cost of $117 per employee per year.

  • The institution eliminates this cost after implementing Microsoft 365 A5.

  • Only 50% of the benefit is realized in Year 1 as some prior solution license agreements expire.

Risks. The following risks impact the size of this benefit:

  • The amount of cost elimination is dependent on the prior state of the organization; this amount varied between the interviewees’ institutions.

  • Security needs also impacted the alternate solutions that an organization would need if not using Microsoft 365 A5, which introduces variability in this benefit.

Results. To account for these risks, Forrester adjusted this benefit downward by 15%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $76,000.

30%

Reduction in license costs

“We went down a journey of consolidating with the broadest set of tools. That was Microsoft.”

Assistant superintendent of schools, public school district

Reduced License Costs From Vendor Consolidation

Ref. Metric Source Year 1 Year 2 Year 3
A1 Employees Composite 1,250 1,250 1,250
A2 Microsoft 365 A5 subscription costs A1*$117 $146,250 $146,250 $146,250
A3 Reduction compared to previous solutions Interviews 15% 30% 30%
At Reduced license costs from vendor consolidation A2*A3 $21,938 $43,875 $43,875
  Risk adjustment 15%      
Atr Reduced license costs from vendor consolidation (risk-adjusted)   $18,647 $37,294 $37,294
Three-year total: $93,234 Three-year present value: $75,792

Strengthened Security

Evidence and data. Interviewees noted that Microsoft 365 A5 included more than 30 security, compliance, and privacy features not included in Microsoft 365 A3. Because they were all from a single vendor, these capabilities offered tight integration and improved the interviewees’ organizations’ security postures in terms of the number and severity of breaches. This improved posture reduced downtime and cost after a cyber event, protected the interviewees’ organizations’ public reputation, and limited the disruption to teaching. Interviewees and survey respondents shared the following examples of how their organizations’ security postures improved:

  • The chief information officer at an alternative high school described a recent incident: “We just had a cyber outbreak where I had all the data I wanted to know about it. I knew exactly where it came from, who it hit, where it replicated from, the user that it got to, what we did to respond to that user, and then followed it up with a training that was built right into Purview and compliance. We had the tools we needed.”

  • The executive director of technology and innovation said their independent school was the target of a ransomware attack, which led to their implementation of Microsoft 365 A5. The interviewee shared that even though the ransomware event was ultimately handled, it had a significant impact on their organization in terms of the costs of recovery and remediation. They described the impact in the following way: “Our team of 12 spent over 125 hours to remediate immediately following the incident. Over 1,100 users were impacted.” The interviewee noted that with Microsoft 365 A5, their district was better equipped to avoid similar incidents in the future, including the associated impacts to the students as well as the costs of recovery.

  • The director of technology at a private school said that it was important that they could demonstrate that “everything is safe, protected, and encrypted as needed,” particularly for sensitive student information.

  • The director of information services for a public school district explained that A5 made it easier to enforce policies, thus strengthening their security posture. They stated: “[Enforcing policies] through Intune, where we’re pushing it out to everything comprehensively, you have that consistency that just ups your security profile because you know what you’ve got across the board, [and] you’ve got less exceptions to worry about. Whereas whenever you don’t have that nice controlled, ‘everybody’s covered by one policy’ thing, you’re always wrestling with it.”

  • The IT director for a rural school system explained that A5 was a critical tool for them to protect key personnel who, if compromised, would severely damage their ability to operate. They said: “A5 is really for what I call the really important accounts [like] superintendents [and] our district secretary. Just the really small core of the school that sees and does a ton. Being a smaller school, you have to wear a lot of hats. For example, our district secretary is also our treasurer. There’s so many different documents that she has to be in charge of.”

  • Among survey respondents, 88% cited improved threat protection and security (including identity) posture as a key outcome of adopting Microsoft 365 A5.

Figure 3

Improvements To Threat Protection And Security

[CHART DIV CONTAINER]
Decreased risk of data breach Fewer data breaches/incidents Lower costs associated with data breach/incidents

Base: 64 IT decision-makers at primary education organizations that use Microsoft 365 A5
Source: A commissioned study conducted by Forrester Consulting on behalf of Microsoft, October 2025

Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:

  • The total annual risk exposure for the composite organization is approximately $1.1 million based on Forrester security survey data and scaled to the size of the organization.2

  • There are two parts to the benefit calculation: 1) the benefit associated with reduction in the overall number of breaches and 2) the benefit associated with reduced cost of the remaining breaches, including improved remediation.

  • The reduction in the overall number of breaches is 20% by Year 3, and the reduction in cost of remaining breaches is 25% by Year 3. This represents an incremental improvement over the prior state, including the tools and processes that were previously in place to maintain security.

Risks. The following risks impact the size of this benefit:

  • The total risk exposure is highly variable between organizations.

  • Variability in improvement in both breach avoidance and breach cost.

Results. To account for these risks, Forrester adjusted this benefit downward by 25%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $776,000.

25%

Reduction in cost of incident remediation

“We needed to modernize our security footprint.”

Assistant superintendent of schools, public school district

Strengthened Security

Ref. Metric Source Year 1 Year 2 Year 3
B1 Annual risk exposure addressable with Microsoft 365 A5 Forrester research $1,134,400 $1,134,400 $1,134,400
B2 Incremental reduction in breaches Interviews and survey 15.00% 20.00% 20.00%
B3 Savings due to reduced risk of breaches B1*B2 $170,160 $226,880 $226,880
B4 Reduction in total cost of remaining breaches Interviews and survey 18.75% 25.00% 25.00%
B5 Savings from lower costs associated with remaining breaches (B1-B3)*B4 $180,795 $226,880 $226,880
Bt Strengthened security B3+B5 $350,955 $453,760 $453,760
  Risk adjustment ↓25%      
Btr Strengthened security (risk-adjusted)   $263,216 $340,320 $340,320
Three-year total: $943,856 Three-year present value: $776,231

Avoided Additional IT Security Team Member Hires

Evidence and data. According to interviewees, compared to a multivendor security stack, Microsoft 365 A5 improved IT security team efficiency and effectiveness through integrated solutions, centralized visibility, and built-in automation. This streamlined breach prevention, detection, and remediation; reduced management effort; and enabled teams to handle greater workloads without adding headcount. Interviewees and survey respondents shared examples of these gains:

  • The chief information officer of an alternative high school described the situation prior to the deployment of Microsoft 365 A5: “Everything [outside of Microsoft] that plugs in, you need an integration. If we couldn’t work with the integrated solutions in A5, we would probably need at least two — possibly three — more resources to support responding and reporting.”

  • The assistant superintendent of schools for a public school district said: “[We’re] simplifying the environment. We’re training people around one set of tools.”

  • Among survey respondents, 73% said that they were able to lower internal IT costs due to less security and IT team efforts. The figure below shows the IT groups whose efficiency was most improved by the adoption of Microsoft 365 A5.

Figure 4

IT Time Savings By User Types

[CHART DIV CONTAINER]
It Ops Security and operations (SecOps) DevOps Internal audit Developers

Base: 64 IT decision-makers at primary education organizations that use Microsoft 365 A5
Source: A commissioned study conducted by Forrester Consulting on behalf of Microsoft, October 2025

Modeling and assumptions. Based on the interviews and survey, Forrester assumes the following about the composite organization:

  • The composite organization avoids adding incremental headcount to the IT security team due to the efficiencies gained through the use of Microsoft 365 A5.

  • The institution avoids an additional 50% of the IT security team, or 1 additional FTE.

Risks. The risk that impacts the size of this benefit is that rather than keeping to the same level of responsibility, some organizations increased the tasks that the security team were able to cover. This reflects the increased efficiency gain with Microsoft 365 A5, as well as improved security practices, but introduces variability in the amount of staff headcount that can be avoided.

Results. To account for these risks, Forrester adjusted this benefit downward by 10%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $161,000.

50%

Additional IT security headcount avoided

Avoided Additional IT Security Team Member Hires

Ref. Metric Source Year 1 Year 2 Year 3
C1 FTEs on IT security team Composite 2 2 2
C2 Headcount avoided (FTEs) Y1: C1*25%
Y2 and Y3: C1*50%
0.5 1.0 1.0
C3 Fully burdened annual salary for an IT security staff member Composite $87,750 $87,750 $87,750
Ct Avoided additional IT security team member hires C2*C3 $43,875 $87,750 $87,750
  Risk adjustment ↓10%      
Ctr Avoided additional IT security team member hires (risk-adjusted)   $39,488 $78,975 $78,975
Three-year total: $197,438 Three-year present value: $160,501

Reduced Employee Downtime

Evidence and data. Faculty and staff at interviewees’ and survey respondents’ organizations experienced less downtime due to fewer successful breaches and faster remediation of those that did occur. For the interviewees whose organizations moved from on-premises applications to a cloud-based platform, Microsoft 365 A5 also helped reduce downtime associated with on-premise solutions. Interviewees and survey respondents shared the following examples of reduced downtime:

  • Interviewees agreed that the improved security associated with the move to Microsoft 365 A5 reduced the impact of security incidents on faculty and staff. In addition to incident prevention, they described the ability to investigate and resolve incidents more easily, without impacting users. The chief information officer of an alternative high school said, “We surface a lot of information having the advanced level solutions, which allows us to stop a lot of things before they become bigger issues for us.”

  • The director of information services for a public school district added: “Certainly not having everything locked down improves learning experience. It’s hard to express what would be a good case there. I mean, if the network’s breached and everything gets locked down, no one’s doing much. There’s a very heavy reliance on the internet these days.”

  • Survey respondents indicated that non-IT employees saved close to 200 hours a year due to the adoption of Microsoft 365 A5; this impact was due primarily to self-service time savings (56%) and less downtime (69%).

Modeling and assumptions. Based on the interviews and survey, Forrester assumes the following about the composite organization:

  • The composite organization saves approximately 20 minutes per week for both teachers and staff.

  • In Year 1, 50% of the benefit is realized as the solution is deployed and users become accustomed to it.

  • Forrester assumes a conservative 25% of the time saved is redirected into productive work.

Risks. The following risks impact the size of this benefit:

  • Productivity gains are very dependent on the use of the time saved, which is variable based on both the organization and the individual.

  • The hourly rates for both faculty and staff vary widely between institutions as well as across regions.

Results. To account for these risks, Forrester adjusted this benefit downward by 15%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $238,000.

20 minutes

Weekly time savings for faculty and staff

Reduced Employee Downtime

Ref. Metric Source Year 1 Year 2 Year 3
D1 Staff Composite 750 750 750
D2 Annual staff time savings (hours) Y1: 50 weeks*0.33 hours*50%
Y2 and Y3: 50 weeks*0.33 hours
8.25 16.50 16.50
D3 Fully burdened hourly salary for a staff member Composite $30 $30 $30
D4 Reduced staff downtime D1*D2*D3 $185,625 $371,250 $371,250
D5 Faculty Composite 500 500 500
D6 Annual faculty time savings (hours) Y1: 36 weeks*0.25 hours*50%
Y2 and Y3: 36 weeks*0.25 hours
4.50 9.00 9.00
D7 Fully burdened hourly cost for a faculty member Composite $40 $40 $40
D8 Reduced faculty downtime D5*D6*D7 $90,000 $180,000 $180,000
D9 Productivity capture TEI standard 25% 25% 25%
Dt Reduced employee downtime (D4+D8)*D9 $68,906 $137,813 $137,813
  Risk adjustment ↓15%      
Dtr Reduced employee downtime (risk-adjusted)   $58,570 $117,141 $117,141
Three-year total: $292,852 Three-year present value: $238,066

Eliminated Costs Due To Power BI

Evidence and data. Interviewees noted that Power BI was included in the Microsoft 365 A5 solution, which was a differentiator from other versions. Several interviewees’ organizations eliminated their previous Power BI licenses as well as other analytics tools when they moved to Microsoft 365 A5. Interviewees noted this cost savings was an additional factor in the decision to move to Microsoft 365 A5, along with the cost savings achieved through the consolidation and elimination of duplicative security solutions.

  • The assistant superintendent of schools for a public school district commented, “The incremental cost of moving to A5 from A3 was completely covered by the elimination of the separate Power BI licenses.”

  • According to the chief information officer at an alternative high school, “While the main reason for our move to Microsoft 365 A5 was security, the second was definitely Power BI.”

  • With the availability of Power BI in the Microsoft 365 A5 package, 72% of survey respondents indicated that their organization had better data analysis following the deployment.

Modeling and assumptions. Based on the interviews and survey, Forrester assumes the following about the composite organization:

  • For the composite organization, the number of Power BI users is set at 5% of the total employee user population. While some interviewees had larger proportions of employees using Power BI, 5% is considered representative for the composite organization.

  • The annual cost per user is $14 per month.

Risks. The risks that impact the size of this benefit include the cost savings associated with eliminating Power BI licenses, which is entirely dependent on the proportion of the users who need this application.

Results. To account for these risks, Forrester adjusted this benefit downward by 10%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $24,000.

Eliminated Costs Due To Power BI

Ref. Metric Source Year 1 Year 2 Year 3
E1 Power BI users Composite 63 63 63
E2 Annual cost per user Microsoft $168 $168 $168
Et Eliminated costs due to Power BI E1*E2 $10,500 $10,500 $10,500
  Risk adjustment ↓10%      
Etr Eliminated costs due to Power BI (risk-adjusted)   $9,450 $9,450 $9,450
Three-year total: $28,350 Three-year present value: $23,501

Unquantified Benefits

Interviewees and survey respondents mentioned the following additional benefits that their organizations experienced but were not able to quantify:

  • Productivity gains through the use of Copilot Chat. All interviewees discussed the positive impact of having Copilot Chat available to all users within their organizations. For teachers, interviewees cited the use of Copilot Chat in creating lesson plans, quizzes, and reports; for staff, use cases included summarizing long documents and understanding legislation, among others. The impact of Microsoft 365 Copilot is discussed further in the Flexibility section.

“With Copilot Chat, we have sanctioned AI. We’re a school that embraces it. We don’t ban it. We encourage it.”

Chief information officer, alternative high school

  • Improved security and compliance efforts with Purview. Several interviewees mentioned that the use of Purview was instrumental in their improved security processes, particularly in investigating compromised accounts. The assistant superintendent at a public school district mentioned that Purview “plays a huge role in our use of sensitivity labels,” while the chief information officer at an alternative high school cited the use of Purview for advanced e-discovery. Additionally, Purview was used in tandem with Microsoft 365 A5 to support AI initiatives and pilot programs.

  • Additional opportunities through flexible learning models. Several interviewees mentioned the ability to leverage remote access. For one school district, online learning was a critical part of the educational model, which required the security capabilities of Microsoft 365 A5. At a private school, the director of technology described the seamless access to sensitive documents for the student support team, which was critical “to make sure that students’ needs are being met.” While this benefit has not been quantified for the financial analysis, it added value for all interviewees’ organizations.

  • Improved learning experience. The IT director for a public school explained that reduced downtime improved trust and allowed students and staff to focus more on classroom outcomes. They detailed: “If we’re protecting our high-value targets with the most sensitive data the best we can, I think that makes the school better. If we had to shut the network down, we can’t have school. If we had some attack where student data is compromised, then they don’t feel protected in the school and that doesn’t lead them to have a high respect for the school. If they never have to think about me or their device, then they’re focusing on their classroom or on their students, or if you’re a student you’re focusing on your classwork that much more.”

Flexibility

The value of flexibility is unique to each customer. There are multiple scenarios in which a customer might implement Microsoft 365 A5 and later realize additional uses and business opportunities, which would yield additional benefit after incremental investment. For the purposes of this analysis, we have quantified the benefit of implementing Microsoft 365 Copilot for a select group of users.

Evidence and data. The chief information officer at an alternative high school implemented a pilot program where 40% of teachers had paid licenses for Microsoft 365 Copilot. These teachers were able to drastically improve their lesson planning processes.

  • The chief information officer at this organization shared the following: “Every single day, a teacher has to go in, look at the curriculum for the day, and determine what they want to communicate to students. That’s lesson planning. Every school, every teacher does this. Our teachers will plug in scope and sequence into Copilot, create workspaces, whether it’s in OneDrive or OneNote or whatever it might be, whatever tool they’re using that day, or Teams or something else, have Copilot spit the lesson plan directly out and upload that into scope and sequence. It’s super cool stuff!”

  • The interviewee estimated that the teachers in the pilot group were able to create their lesson plans in 30 minutes, when previously it had taken them 3 to 4 hours a day.

While this is a single use case, interviewees anticipated that users would find more ways to leverage Microsoft 365 Copilot as familiarity with the solution grows and additional opportunities are identified.

Figure 5

Users Agree On The Importance Of AI In Their Organization

[CHART DIV CONTAINER]
Providing AI tools to educators/teachers/faculty as part of a comprehensive and secure solution is very important Providing AI tools to students as part of a comprehensive and secure solution is very important The use of AI in my institution influenced the decision to adopt A5

Base: 64 IT decision-makers at primary education organizations that use Microsoft 365 A5
Source: A commissioned study conducted by Forrester Consulting on behalf of Microsoft, October 2025

“Microsoft 365 Copilot is amazing for lesson planning. Teachers love it.”

Chief information officer, alternative high school

Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:

  • The number of users in the Microsoft 365 Copilot pilot group is initially 15% of the total users in Year 1 and grows to 23% in Year 2 and 30% in Year 3.

  • Users save approximately 1.5 hours per week; as in the previous productivity benefit calculation, 25% of this time savings is expected to be redirected into productive work.

Costs. The additional investment required for this benefit is the cost of the Microsoft 365 Copilot licenses, which is $30 per user per month, as well as time spent on training as well as user discovery and experimentation.

Risks. The risks that impact the size of this benefit include the use of AI in the organization, which is very dependent on specific use cases and user adoption. Therefore, this benefit has inherent variability depending on the specifics of the institution.

Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $491,000. This benefit is calculated to demonstrate the value of the additional investment in Microsoft 365 Copilot; it is not included in the core model results.

Flexibility quantification when evaluated as part of a specific project is described in more detail in Total Economic Impact Approach.

20%

Increase in net benefit over the core model

Microsoft 365 Copilot Productivity Gains

Ref. Metric Source Year 1 Year 2 Year 3
X1 Microsoft 365 Copilot users Composite 188 288 375
X2 Time savings Interviews 75 75 75
X3 Productivity capture TEI standard 25% 25% 25%
X4 Fully burdened hourly rate for a user Composite $40 $40 $40
Xt Microsoft 365 Copilot productivity gains X1*X2*X3*X4 $140,625 $215,625 $281,250
  Risk adjustment ↓5%      
Xtr Microsoft 365 Copilot productivity gains (risk-adjusted)   $133,594 $204,844 $267,188
Three-year total: $605,625 Three-year present value: $491,483

Analysis Of Costs

Quantified cost data as applied to the composite

Total Costs

Ref. Cost Initial Year 1 Year 2 Year 3 Total Present Value
Ftr Internal costs $121,095 $50,456 $50,456 $50,456 $272,464 $246,572
Gtr External costs $10,500 $78,750 $78,750 $78,750 $246,750 $206,340
  Total costs (risk-adjusted) $131,595 $129,206 $129,206 $129,206 $519,214 $452,912

Internal Costs

Evidence and data. Interviewees noted that implementing Microsoft 365 A5’s security, compliance, and privacy features was generally easier than previous projects due to its native integration. Implementation timelines ranged from a few months to a year depending on organization size and initial feature deployment. Ongoing effort for Microsoft 365 A5 activities and new policy rollouts was described as minimal — typically about 5% of the IT team’s time, varying by organization size.

  • Most interviewees’ organizations had a phased deployment which took between four and nine months.

  • Interviewees whose institutions had alternate platforms said they needed more time and effort, while other interviewees whose organizations were moving solely from Microsoft 365 A3 to A5 had more streamlined experiences.

Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:

  • The composite organization has an internal team supporting the deployment and implementation of Microsoft 365 A5, composed of 20% of the overall IT team, or two FTEs. The implementation period is eight months.

  • On an ongoing basis, 5% of the IT team (0.5 FTEs) is required for administration and maintenance.

Risks. The following risks impact the size of this cost:

  • Implementation costs can vary widely based on the scope of the implementation as well as the prior state of the organization.

  • Ongoing maintenance and administration, while typically minimal, can vary over time, particularly as the organization’s needs change.

Results. To account for these risks, Forrester adjusted this cost upward by 15%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $247,000.

8 months

Length of implementation period

“Moving from A3 to A5 was very comfortable for the users.”

Director of technology, private school

Internal Costs

Ref. Metric Source Initial Year 1 Year 2 Year 3
F1 Implementation (months) Composite 8 0 0 0
F2 FTEs required for implementation Composite 2 0 0 0
F3 Implementation costs F1*F2*(C3/12) $105,300 0 0 0
F4 FTEs required for ongoing solution management Composite 0  0.5 0.5 0.5
Ft Internal costs F3+(F4*C3) $105,300 $43,875 $43,875 $43,875
  Risk adjustment ↑15%        
Ftr Internal costs (risk-adjusted)   $121,095 $50,456 $50,456 $50,456
Three-year total: $272,464 Three-year present value: $246,572

External Costs

Evidence and data. External costs for interviewees’ organizations primarily consisted of the incremental Microsoft 365 A5 subscription fees. Two interviewees said their organizations also engaged professional services upfront for deployment, configuration, best practice implementation, and ongoing guidance in rolling out new security features.

Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:

  • The incremental increase in license cost of $60 is included in each year of the analysis.

  • The professional services cost of $10,000 is incurred upfront at the start of the deployment.

Risks. The following risks impact the size of this cost:

  • The overall size of the organization.

  • The number of professional services required.

Results. To account for these risks, Forrester adjusted this cost upward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $206,000.

“If you went to a bank and you could just walk into the vault and get whatever you wanted, that would not be a secure bank. You wouldn’t want to bank there. Schools hold all this sensitive information. I’d rather be the Fort Knox of schools [with A5] than the easy-pass bank.”

IT director, public school

External Costs

Ref. Metric Source Initial Year 1 Year 2 Year 3
G1 Microsoft 365 A5 subscriptions Composite $0 1,250 1,250 1,250
G2 Incremental Microsoft 365 A5 cost over A3 $129-$69 $0 $60 $60 $60
G3 Incremental Microsoft 365 A5 subscription uplift cost G1*G2 $0 $75,000 $75,000 $75,000
G4 Professional services Interviews $10,000 $0 $0 $0
Gt External costs G3+G4 $10,000 $75,000 $75,000 $75,000
  Risk adjustment ↑5%        
Gtr External costs (risk-adjusted)   $10,500 $78,750 $78,750 $78,750
Three-year total: $246,750 Three-year present value: $206,340

Financial Summary

Consolidated Three-Year, Risk-Adjusted Metrics

Cash Flow Chart (Risk-Adjusted)

[CHART DIV CONTAINER]
Total costs Total benefits Cumulative net benefits Initial Year 1 Year 2 Year 3

Cash Flow Analysis (Risk-Adjusted)

  Initial Year 1 Year 2 Year 3 Total Present Value
Total costs ($131,595) ($129,206) ($129,206) ($129,206) ($519,214) ($452,912)
Total benefits $0 $389,371 $583,179 $583,179 $1,555,730 $1,274,091
Net benefits ($131,595) $260,165 $453,973 $453,973 $1,036,516 $821,179
ROI           181%
Payback           7 months

 Please Note

The financial results calculated in the Benefits and Costs sections can be used to determine the ROI, NPV, and payback period for the composite organization’s investment. Forrester assumes a yearly discount rate of 10% for this analysis.

These risk-adjusted ROI, NPV, and payback period values are determined by applying risk-adjustment factors to the unadjusted results in each Benefit and Cost section.

The initial investment column contains costs incurred at “time 0” or at the beginning of Year 1 that are not discounted. All other cash flows are discounted using the discount rate at the end of the year. PV calculations are calculated for each total cost and benefit estimate. NPV calculations in the summary tables are the sum of the initial investment and the discounted cash flows in each year. Sums and present value calculations of the Total Benefits, Total Costs, and Cash Flow tables may not exactly add up, as some rounding may occur.

From the information provided in the interviews and survey, Forrester constructed a Total Economic Impact™ framework for those organizations considering an investment in Microsoft 365 A5.

The objective of the framework is to identify the cost, benefit, flexibility, and risk factors that affect the investment decision. Forrester took a multistep approach to evaluate the impact that Microsoft 365 A5 can have on an organization.

Due Diligence

Interviewed Microsoft stakeholders and Forrester analysts to gather data relative to Microsoft 365 A5.

Interviews And Survey

Interviewed four decision-makers and surveyed [y] respondents at organizations using Microsoft 365 A5 to obtain data about costs, benefits, and risks.

Composite Organization

Designed a composite organization based on characteristics of the interviewees’ and survey respondents’ organizations.

Financial Model Framework

Constructed a financial model representative of the interviews and survey using the TEI methodology and risk-adjusted the financial model based on issues and concerns of the interviewees and survey respondents.

Case Study

Employed four fundamental elements of TEI in modeling the investment impact: benefits, costs, flexibility, and risks. Given the increasing sophistication of ROI analyses related to IT investments, Forrester’s TEI methodology provides a complete picture of the total economic impact of purchase decisions. Please see Appendix A for additional information on the TEI methodology.

Total Economic Impact Approach

Benefits

Benefits represent the value the solution delivers to the business. The TEI methodology places equal weight on the measure of benefits and costs, allowing for a full examination of the solution’s effect on the entire organization.

Costs

Costs comprise all expenses necessary to deliver the proposed value, or benefits, of the solution. The methodology captures implementation and ongoing costs associated with the solution.

Flexibility

Flexibility represents the strategic value that can be obtained for some future additional investment building on top of the initial investment already made. The ability to capture that benefit has a PV that can be estimated.

Risks

Risks measure the uncertainty of benefit and cost estimates given: 1) the likelihood that estimates will meet original projections and 2) the likelihood that estimates will be tracked over time. TEI risk factors are based on “triangular distribution.”

Financial Terminology

Present value (PV)

The present or current value of (discounted) cost and benefit estimates given at an interest rate (the discount rate). The PVs of costs and benefits feed into the total NPV of cash flows.

Net present value (NPV)

The present or current value of (discounted) future net cash flows given an interest rate (the discount rate). A positive project NPV normally indicates that the investment should be made unless other projects have higher NPVs.

Return on investment (ROI)

A project’s expected return in percentage terms. ROI is calculated by dividing net benefits (benefits less costs) by costs.

Discount rate

The interest rate used in cash flow analysis to take into account the time value of money. Organizations typically use discount rates between 8% and 16%.

Payback

The breakeven point for an investment. This is the point in time at which net benefits (benefits minus costs) equal initial investment or cost.

Appendix A

Total Economic Impact

Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists solution providers in communicating their value proposition to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of business and technology initiatives to both senior management and other key stakeholders.

Appendix B

Survey Demographics

[CONTENT]

 Role  
IT/information security 69%
Administration or school leadership 31%

[CONTENT]

 Level  
C-suite executive 14%
Vice president 27%
Director 33%
Manager 27%

[CONTENT]

Geography  
United States 33%
United Kingdom 22%
Canada 17%
Germany 14%
France 14%

[CONTENT]

Students  
Fewer than 300 9%
300 to 599 16%
600 to 999 22%
1,000 to 2,499 38%
2,500 to 4,999 11%
5,000 to 9,999 5%
Note: Percentages may not total 100 due to rounding  

Appendix C

Endnotes

1 Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists solution providers in communicating their value proposition to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of business and technology initiatives to both senior management and other key stakeholders.

2 Cumulative breach costs are computed using the composite organization’s size (revenue or number of employees) as an input to a regression analysis of reported total cumulative costs for all breaches for organizations that experienced at least one breach in the past 12 months. Source: Forrester’s Security Survey, 2025, “Using your best estimate, what was the total cumulative cost of all breaches experienced by your organization in the past 12 months?” Base: 1,740 global security decision-makers who have experienced a breach in the past 12 months. The cumulative breach cost is then multiplied by a 67% likelihood for organizations to experience one or more breaches in a given year. Source: Forrester’s Security Survey, 2025, “How many times do you estimate that your organization’s sensitive data was potentially compromised or breached in the past 12 months?” Base: 2,643 global security decision-makers

Disclosures

Readers should be aware of the following:

This study is commissioned by Microsoft and delivered by Forrester Consulting. It is not meant to be used as a competitive analysis.

Forrester makes no assumptions as to the potential ROI that other organizations will receive. Forrester strongly advises that readers use their own estimates within the framework provided in the study to determine the appropriateness of an investment in Microsoft 365 A5. For any interactive functionality, the intent is for the questions to solicit inputs specific to a prospect’s business. Forrester believes that this analysis is representative of what companies may achieve with Microsoft 365 A5 based on the inputs provided and any assumptions made. Forrester does not endorse Microsoft or its offerings. Although great care has been taken to ensure the accuracy and completeness of this model, Microsoft and Forrester Research are unable to accept any legal responsibility for any actions taken on the basis of the information contained herein. The interactive tool is provided ‘AS IS,’ and Forrester and Microsoft make no warranties of any kind.

Microsoft reviewed and provided feedback to Forrester, but Forrester maintains editorial control over the study and its findings and does not accept changes to the study that contradict Forrester’s findings or obscure the meaning of the study.

Microsoft provided the customer names for the interviews but did not participate in the interviews.

Forrester fielded the double-blind survey using a third-party survey partner.

Consulting Team:

Sam Conway
Jonathan Lipsitz

Published

August 2026