The Standard version is installed with layered security to aid block server attacks and system breaches. It protects the cloud by detecting suspicious activities with only trusted softwares allowed to run with Device Guard.
Control Flow Guard guards against exterior and interior memory attacks. The multiple layered system help protect the integrity of your data.