1
Wins This Year
Johnson River Enterprises is a Fairbanks commercial general contractor that has delivered quality, on-time projects across interior and remote Alaska for more than 30 years. Since becoming a Vicinity client in April 2025, we have supported 23 users across the main office and the shop.
1
Network Refresh (Summer 2026)
The Project
The office firewall, switch, and wireless access point were all past end of support. The firewall was running 2018 firmware, and the access point had not received updates since 2021. None of the three could be patched against new threats.
What We Did
Replaced all three with a Fortinet FortiGate 70G firewall, FortiSwitch 148F PoE switch, and FortiAP 231K Wi-Fi 7 access point. Each is covered by FortiCare Premium and FortiGuard for 3 years, monitored by Vicinity, and documented. The legacy hardware was retired.
2
CMMC Level 1 Assessment and Readiness (Summer 2026)
The Project
Federal and defense related customers increasingly expect contractors to show they protect sensitive information. JRE wanted a clear picture of where it stood against the CMMC framework and a path to meet Level 1.
What We Did
Completed an initial compliance assessment, followed by Phase 1 CMMC Level 1 readiness work, finished in summer 2026. This gives JRE a documented baseline and a foundation for any future Level 2 effort.
Every Day, In the Background
- 24/7 help desk support for all staff, by phone, email, and web chat
- Round-the-clock monitoring, patching, and health checks across all managed devices
- AI-driven threat detection (SentinelOne EDR) and automated response on managed endpoints
- Daily Microsoft 365 backups via Datto SaaS Protection
- Ongoing IT strategy, budget coordination, and lifecycle planning
2
Business Alignment
How your IT environment supports Johnson River Enterprises' business goals and operations.
| Business Priority | IT Dependency | Status | Notes |
|---|---|---|---|
| Deliver projects on time | Procore, Primavera P6, Bluebeam, reliable internet | Attention | Single internet circuit with no failover. Four project laptops are 7 to 8 years old. |
| Protect project and financial data | Microsoft 365, file shares, QuickBooks, backups | Attention | Microsoft 365 is fully backed up. Datto server backup with an offsite copy is in progress. |
| Support field and remote crews | Laptops, Microsoft 365, remote access tools | Healthy | All laptops are monitored and protected. Remote access tools should be consolidated. |
| Keep staff productive | Vicinity help desk, Microsoft 365, Zoom and Teams | Healthy | Support is delivered by phone, email, and chat. Collaboration tools are well adopted. |
| Keep office infrastructure reliable | File server, domain controllers, phone system | At Risk | Both physical servers have been out of warranty since 2020 and are 7 and 10 years old. A replacement is being scoped. |
| Meet customer and insurer security expectations | Endpoint protection, backups, firewall, MFA, CMMC | Attention | CMMC Level 1 readiness is complete. Conditional Access is the next step, and a CMMC Level 2 option is being evaluated. |
3
Application Inventory
Key business applications in use at Johnson River Enterprises, based on site documentation and software discovered on managed devices.
| Application | Purpose | Vendor / Platform | Notes |
|---|---|---|---|
| Microsoft 365 | Email, Office apps, Teams, SharePoint, OneDrive | Microsoft (cloud) | Backed up by Datto SaaS Protection. One device still has standalone Office 2021, which is now out of support. |
| Procore | Construction project management | Procore (web) | Cloud based. Requires reliable internet. |
| Autodesk (BIM 360, AutoCAD LT) | Design coordination and drawings | Autodesk | Cloud and desktop. Vicinity can help track license renewals. Several older Autodesk components are installed on a small number of devices. |
| Bluebeam Revu | Plan markup and takeoffs | Bluebeam | Installed on about 19 devices. Vicinity can help track license renewals. Several older versions are in use and should be standardized. |
| Primavera P6 | Project scheduling | Oracle | On-premises application on a small number of devices. |
| QuickBooks Pro | Accounting | Intuit | Runs on the accounting workstation. |
| Adobe Acrobat | PDF creation and editing | Adobe | Several versions in use, including older releases. Consider standardizing. |
| SketchUp Pro | 3D modeling | Trimble | Installed on a few devices. |
| Zoom and Microsoft Teams | Meetings | Zoom, Microsoft | Zoom is installed widely. Webex and GoToMeeting also appear on a few devices. |
| LogMeIn / GoToMyPC | Remote access to office computers | GoTo (LogMeIn) | Installed on more than a dozen devices. Consider consolidating remote access onto one secured method. |
| Blue Iris | Security cameras (shop) | Blue Iris | Hosted on a shop PC. |
| Asterisk phone system | Voice and fax | Asterisk, third-party supported | Supported by an outside vendor and not managed by Vicinity. |
4
IT Health Snapshot
Total Users
23
Managed users across 2 locations
Workstations
35
20 laptops, 15 desktops and other
Servers
3
2 physical, 1 virtual, Windows Server 2022
Locations
2
Main office and shop, Fairbanks
Health at a Glance
| Area | Status | Notes |
|---|---|---|
| Patch management | Healthy | All 38 managed devices are enrolled in Vicinity patch management. |
| Endpoint protection | In progress | SentinelOne is on 36 of 38 devices. The final 2 are being deployed. |
| Microsoft 365 backup | Healthy | 32 of 32 seats protected by Datto SaaS Protection. |
| Server backup | In progress | Local backups today. Vicinity is working with JRE on Datto backup with an offsite copy. |
| Network | Healthy | Core network refreshed in 2026. Some legacy rack equipment to validate. |
| Workstation lifecycle | Attention | 4 laptops over 5 years old, 13 more in the 3 to 5 year range, 5 needing OS updates. |
| Server hardware | At Risk | Both physical servers have been out of warranty since 2020. A replacement is being scoped. |
| Active Directory and Entra ID / Intune | Needs Review | On-premises Active Directory and a cloud-only Microsoft 365 tenant are both in use. Device join and management is mixed (18 domain joined, 20 workgroup). |
Detailed Reports
Computers Report
Computers & Laptops
35 workstations tracked
Age, OS & lifecycle status
Refresh recommendations
Network Report
Network & Connectivity
2 locations
Firewalls, switches & access points
Site-by-site coverage
M365 Report
Email, Accounts & Licenses
32 accounts, 100% backed up
License types & MFA status
Account health & backups
Server Report
Servers & Infrastructure
3 servers
OS support status & roles
Backup & upgrade planning
5
Security Posture
Security Stack
| Control | Solution | Status |
|---|---|---|
| Endpoint Detection & Response (EDR) | SentinelOne, 36 of 38 managed devices. Final 2 devices being deployed. | In Progress |
| Email Security | Microsoft 365 anti-phishing, spam, and impersonation protection | Active |
| Multi-Factor Authentication | Microsoft Entra ID Security Defaults. Microsoft Authenticator method is currently disabled. | Verify Registration |
| Conditional Access | Microsoft Entra ID. An all-users MFA policy exists in report-only mode and is not yet enforced. | Recommended |
| Backup / M365 | Datto SaaS Protection, 32 of 32 seats | Active |
| Backup / Servers | Local backups today. Datto backup with an offsite copy is being set up with Vicinity. | In Progress |
| Firewall | Fortinet FortiGate 70G with FortiCare Premium and FortiGuard | Active |
| Patch Management | Vicinity RMM, all managed devices | Active |
| Microsoft Secure Score | Microsoft 365 Defender, 232 of 276 points | 84% |
Open Security Gaps
| Gap | Description |
|---|---|
| Server backups are local only | A failure of the office or the servers could affect file shares and domain data. Datto backup with an offsite copy is in progress. |
| Conditional Access is not enforced | Setting it up moves JRE from Security Defaults to enforced, auditable MFA and sign-in policies. |
| Unsupported operating systems | 2 Windows 10 desktops and 3 older Windows 11 laptops are not receiving full security updates. |
| Multiple remote access tools | LogMeIn, GoToMyPC, and OpenVPN are installed on a number of devices in addition to the firewall VPN. Consolidating onto one secured method reduces exposure. |
| Legacy and unknown devices | Older backup devices and unmonitored rack and shop equipment need to be validated. |
6
Priorities & Roadmap
Recommended initiatives and active IT goals for Johnson River Enterprises in the coming period.
| Initiative | Priority | Timeline | Rationale |
|---|---|---|---|
| Complete SentinelOne deployment | High | Nov 2026 | Brings endpoint protection to 38 of 38 devices. |
| Server replacement with managed Datto backup | High | TBD | Both physical servers have been out of warranty since 2020. A replacement is being scoped and Datto backup with an offsite copy is in progress. |
| Set up Conditional Access | Medium | TBD | Moves JRE from Security Defaults to enforced MFA and sign-in policies. An all-users MFA policy already exists in report-only mode. |
| Microsoft licensing review | Medium | Q1 2027 | Business Premium renews February 22, 2027, and Audio Conferencing and Planner renew in March 2027. |
| Workstation OS and hardware remediation | Medium | TBD | Covers 2 Windows 10 PCs, 3 older Windows 11 laptops, 2 Home editions, and 4 aged laptops. |
| Active Directory and Entra ID / Intune review | Medium | TBD | Decide how devices are joined and managed before the server replacement. |
| Internet resilience review | Medium | TBD | Single DSL circuit with no failover at the office. |
| CMMC Level 2 enclave | Low | TBD | A quote has been provided. JRE is evaluating it as an option for the new year. |
| Retire legacy rack equipment and NAS devices | Low | TBD | Reduces risk and clutter, tied to the backup plan. |
Active Goals & Status
Goal
Target
Status
Network refresh (firewall, switch, Wi-Fi)
Complete
Complete
CMMC Level 1 readiness
Complete
Complete
Microsoft 365 backup
32 of 32 seats
Complete
Endpoint protection on every device
38 of 38 devices
In Progress
Managed server backup with offsite copy
TBD
In Progress
Conditional Access set up
TBD
Not Started
CMMC Level 2 enclave
TBD
Under Review
7
Budget & Investment Forecast
Monthly Managed Services
$4,100
Vicinity MSP Agreement
Agreement Term
3 Years
Renewal: March 2028
Partner Since
2025
Vicinity partnership
Upcoming IT Spend to Plan For
| Item | Estimated Investment | Timing |
|---|---|---|
| Server replacement (being scoped with Vicinity) | To be quoted | TBD |
| Datto server backup with offsite copy (in progress) | To be quoted | TBD |
| CMMC Level 2 enclave (quote provided, under evaluation) | Per quote provided | Under evaluation for the new year |
| Laptop replacements (4 over 5 years old, more in the 3 to 5 year range) | To be quoted | TBD |
| Windows 10 desktop upgrades or replacements (2) | To be quoted | TBD |
Microsoft Licensing and Renewals
| Product | Quantity | Renewal Date | Notes |
|---|---|---|---|
| Microsoft 365 Business Premium | 32 | February 22, 2027 | Core email, Office apps, and security |
| Microsoft 365 Audio Conferencing | 9 | March 15, 2027 (2 licenses) March 22, 2027 (7 licenses) | 8 assigned to users today |
| Planner and Project Plan 3 | 2 | March 19, 2027 | Project planning |
| Communications Credits | Pay as you go | No renewal date | Billed on usage |
| Microsoft Power Automate Free | Included | No renewal date | No cost |
| Rights Management Adhoc | Included | No renewal date | No cost |
Vicinity can review these licenses with JRE ahead of the February and March 2027 renewals. We can also help track Autodesk and Bluebeam license renewals, although we do not resell those products.
Thank you, Johnson River Enterprises, LLC.
We appreciate the trust you place in Vicinity to support your business. Our commitment is to keep your IT reliable, your data secure, and your team focused on what matters most.
Questions? Reach us anytime at support@vicinity.team · (866) 520-6414