1
IT Health Snapshot
Total Users
8
Licensed Microsoft 365 users, plus 3 shared mailboxes
Workstations
9
All Windows 11 Pro, managed and monitored
Health Indicators
| Area | Status | Details |
|---|---|---|
| Patch Management | Active | All managed computers have patch management enabled through RMM. |
| Endpoint Protection | Active | SentinelOne EDR on all managed workstations |
| Backup / M365 | Active | Datto SaaS Protection, daily Microsoft 365 backups |
| Identity / MFA | Baseline | MFA enforced tenant-wide through Microsoft Security Defaults. Conditional Access is not available on Business Standard. |
| Microsoft 365 Tenant | Needs Cleanup | Accounts, devices, groups, Teams and SharePoint sites have grown without a standard. See the M365 report. |
| Network | Active | Single site with a Firewalla security gateway, 6 access points, and 3 VLANs. The core switch is over 10 years old and on our watch list. |
| Device Lifecycle | Healthy | 8 of 9 workstations are under 1 year old. One is about 3 years old with warranty ending December 2026. |
Detailed Reports
Computers Report
Computers & Laptops
9 workstations tracked
Age, OS & lifecycle status
Refresh and warranty planning
Network Report
Network & Connectivity
1 location
Firewall, switch & access points
Segmentation and remote access
M365 Report
Email, Accounts & Licenses
8 licensed users
Accounts, licenses & backup
M365 optimization project overview
2
Application Inventory
Key business applications in use at Middle Fork Logistics.
| Application | Purpose | Vendor / Platform | Notes |
|---|---|---|---|
| Microsoft 365 (Office suite) | Word, Excel, PowerPoint, Outlook, OneNote, email & collaboration | Microsoft (cloud and desktop) | Business Standard, 8 licensed users. Microsoft 365 Apps installed on all 9 workstations. Backed up via Datto SaaS Protection |
| Microsoft Teams & SharePoint | Collaboration & file sharing | Microsoft (cloud) | 7 Teams and 11 SharePoint sites. Cleanup recommended |
| QuickBooks Pro 2024 | Accounting | Intuit | Installed on 1 workstation |
| Adobe Acrobat / Creative Cloud | PDF and document tools, design | Adobe | Acrobat on 4 workstations, Creative Cloud on 2 |
| ScanSnap Home | Document scanning | PFU Limited | Installed on 3 workstations |
| One Talk | Business phone | Verizon | Installed on 2 workstations |
3
Security Posture
Security Stack
| Control | Solution | Status |
|---|---|---|
| Endpoint Detection & Response (EDR) | SentinelOne on all managed workstations | Active |
| Email Security | Exchange Online Protection (included with Business Standard) | Basic |
| Multi-Factor Authentication | Microsoft Entra Security Defaults, tenant-wide | Baseline |
| Conditional Access | Not available on current Microsoft 365 licensing | Not Available |
| Backup / M365 | Datto SaaS Protection | Active |
| Firewall | Firewalla Gold Pro security gateway, behind the GCI-owned Juniper SRX300 | Active |
| Remote Access | No inbound remote access in place (no VPN or RDS) | Minimal Exposure |
| Patch Management | Vicinity RMM, all managed workstations | Active |
| Microsoft Secure Score | Microsoft 365 Defender portal | 41 / 100 |
Key Findings
| Finding | Notes & Recommendation |
|---|---|
| Microsoft Secure Score is 41.2% (110 of 267 points) | Most open actions are email threat protections (Safe Links, Safe Attachments, impersonation protection) that come with Microsoft 365 Business Premium. |
| MFA relies on baseline Security Defaults | Business Premium adds Conditional Access, which allows MFA policies tailored to how your team works. |
| Microsoft 365 tenant needs cleanup | Stale devices, guest and generic accounts, and overlapping Teams and SharePoint sites add risk and confusion. See the proposed M365 project. |
| Core network switch is over 10 years old | Cisco Catalyst 2960+ remains in service. No replacement is planned. We will keep it on our watch list. |
Open Security Gaps
- Basic email threat protection and no Defender for Office 365 features until the licensing upgrade.
- Baseline MFA only with no Conditional Access policies available on the current license.
- Some workstations are still being brought under management (RMM, SentinelOne and patching).
- Legacy and stale accounts and devices remain in the Microsoft 365 directory.
4
Priorities & Roadmap
Recommended initiatives and active IT goals for Middle Fork Logistics in the coming period.
| Initiative | Priority | Timeline | Rationale |
|---|---|---|---|
| M365 Entra ID, Intune, SharePoint & Teams optimization project | High | Scope and quote after review | Finish and standardize the Microsoft 365 environment, move to Business Premium, and clean up identities, devices, groups and access. |
| Bring all remaining workstations under management | High | In progress | Complete RMM, SentinelOne and patching coverage across every company workstation. |
| Workstation warranty and lifecycle planning | Medium | Before Dec 2026 | One workstation has warranty ending December 2026. Four newer units carry one-year warranties ending August 2027. |
| Core switch lifecycle watch | Low | Ongoing | Cisco Catalyst 2960+ is over 10 years old. No replacement is planned. We will monitor it and plan ahead. |
Active Goals & Status
Goal
Target
Status
Review M365 optimization project and decide next steps
SOW and quote if approved
Not Started
All company workstations managed and protected
100% RMM and SentinelOne coverage
In Progress
Raise Microsoft Secure Score
Measurable improvement after Business Premium
Not Started
5
Budget & Investment Forecast
Monthly Managed Services
$1,193.25
Vicinity MSP Agreement
Partner Since
2026
Onboarded August 2026
Agreement Renewal
July 2029
Vicinity partnership
Microsoft 365 Licensing
Your Microsoft 365 licenses are currently purchased directly from Microsoft and are not part of your Vicinity invoice. Vicinity can provide Microsoft licensing through our Microsoft partner, Pax8, which brings licensing onto the same invoice as your managed services and lets us manage license changes for you.
| Plan | Cost per User / Month | 8 Users / Month | Notes |
|---|---|---|---|
| Business Standard (current) | $14.00 | $112.00 | Billed directly by Microsoft today. |
| Business Premium (proposed) | $23.50 | $188.00 | Adds Conditional Access, Intune device management, and Defender for Office 365. Difference of $76.00 per month at 8 users. |
Prices shown are per user per month. Final licensing is quoted with the project scope.
Upcoming IT Spend to Plan For
| Item | Estimated Investment | Timing |
|---|---|---|
| M365 optimization project (Entra ID, Intune, SharePoint, Teams) | To be quoted if approved | After review of the project overview |
| Microsoft 365 Business Premium licensing | $23.50 per user / month, about $76.00 per month more than today at 8 users | With the project |
| Core network switch replacement | None planned | Watch item, no timeline |
Thank you, Middle Fork Logistics.
We appreciate the trust you place in Vicinity to support your business. Our commitment is to keep your IT reliable, your data secure, and your team focused on what matters most.
Questions? Reach us anytime at support@vicinity.team · (866) 520-6414