Fairbanks Community Food Bank operates as a nonprofit food distribution organization in Fairbanks, Alaska, relying on a hybrid on-premise and cloud IT environment to support daily distribution operations, financial stewardship, and donor/community communication. Nonprofits are frequently targeted by identity-based attacks due to smaller security teams and lean budgets, making identity protection and legacy system hygiene especially relevant this year.
Credential theft and account takeover remain the leading attack vector against small and mid-sized nonprofits, who are often seen as lower-friction targets than larger commercial organizations.
We've identified that multi-factor authentication isn't yet enforced for all users and are recommending this as a top-priority initiative this period (see Security Posture, Section 5).
Unsupported software versions no longer receive security patches, making them an increasingly common entry point for attackers as vulnerabilities go permanently unfixed.
We've flagged legacy QuickBooks Premier 2013 (desktop) and remnants of SQL Server 2012 for retirement or consolidation — details in Sections 4 and 5.
AI tools are showing up in the workplace faster than most organizations can write policy for them — often through free consumer apps staff install on their own, well before IT or leadership makes an intentional decision. Nonprofits handling donor and client data face real questions about what's safe to paste into an AI tool and what isn't.
Microsoft Copilot is already installed on 14 of your 17 workstations, with no formal AI usage policy in place. We've helped other clients put together a short, plain-language AI policy staff can actually follow — covering what's okay to use AI for and what shouldn't be shared with it. We'd recommend the same here.
How your IT environment supports Fairbanks Community Food Bank's core operations.
| Business Priority | IT Dependency | Current Status | Notes |
|---|---|---|---|
| Food distribution & inventory tracking | PantrySoft, FCFP custom database (FFB-FAI-SQL2) | Healthy | Stable day-to-day operation; legacy SQL 2012 remnants flagged for cleanup |
| Financial management & donor reporting | QuickBooks (Online + legacy desktop) | Attention | Legacy 2013 desktop version still in use alongside QuickBooks Online |
| Staff communication & collaboration | Microsoft 365 (email, files, Teams) | Healthy | 20 active licensed users; all Business Premium licenses in use |
| Remote & multi-site access | Client VPN, Meraki network | Attention | Identity/MFA gap affects overall access security — see Section 5 |
| Area | Status | Details |
|---|---|---|
| Patch Management | Current | Servers and workstations managed and patched via RMM |
| Endpoint Protection | Active | SentinelOne healthy across all monitored devices, no gaps |
| Backup / BCDR | Healthy | Datto BCDR appliance + Datto SaaS Protection for M365 |
| Identity / MFA | At Risk | MFA not yet enforced for all users |
| Network | Healthy | Meraki firewall, switch, and access points — current & supported |
Key business applications in use at Fairbanks Community Food Bank.
| Application | Purpose | Vendor / Platform | Notes |
|---|---|---|---|
| QuickBooks | Financial management & donor reporting | Intuit | Online + legacy 2013 desktop version still in use — recommend retiring the 2013 version |
| PantrySoft | Food distribution & client tracking | PantrySoft | Core program management tool |
| FCFP Database | Custom program tracking | Custom-built, hosted on FFB-FAI-SQL2 | Legacy SQL Server 2012 components remain installed alongside newer SQL tooling |
| Microsoft 365 | Email, Office suite (Word, Excel, PowerPoint), files & collaboration | Microsoft | 20 active Business Premium licenses |
| Adobe Creative Cloud | Design & media editing (Photoshop) | Adobe | Identified on at least one workstation |
| Control | Solution | Status |
|---|---|---|
| Endpoint Detection & Response | SentinelOne | Active |
| Email Security | Microsoft Defender for Office 365 (included in Business Premium) | Active |
| Multi-Factor Authentication | Microsoft Entra ID | Attention |
| Backup / BCDR | Datto BCDR Appliance + Datto SaaS Protection | Active |
| Firewall / Network Security | Meraki MX68 | Active |
| Patch Management | RMM-managed | Active |
| Microsoft Secure Score | Microsoft 365 Defender | 73.37 / 100 |
Fairbanks Community Food Bank's score of 73.37 is above the average of 46.75 for similar-size organizations — a positive sign. The biggest opportunity is in Identity (64%).
Secure Score is based on Microsoft's native tooling only. Security controls such as SentinelOne EDR, Datto BCDR, and your Meraki firewall are not reflected — meaning your overall security posture is stronger than the number alone suggests.
You don't currently have a formal security awareness training program in place for staff. Since identity-based attacks (phishing, credential theft) are the leading threat facing nonprofits your size, ongoing staff training is one of the highest-value additions you could make — it directly reinforces the MFA and identity work already underway.
- Multi-factor authentication is not enforced for all users — the top-scoring opportunity Microsoft identifies (+3.18% Secure Score impact), and our top security recommendation this period.
- Legacy SQL Server 2012 components remain installed on FFB-FAI-AD2 alongside newer SQL tooling — past end-of-life and worth reviewing for cleanup.
- QuickBooks Premier 2013 (desktop) is still installed alongside QuickBooks Online — past end-of-life and no longer receives security updates.
- 25 disabled staff accounts remain in the Microsoft 365 directory — worth a periodic review to confirm proper offboarding.
- No formal security awareness training program is currently in place for staff.
- MFA Enforcement — Multi-factor authentication is not required for all user accounts, leaving identity as the primary exposure area.
- Legacy Software — QuickBooks 2013 desktop and SQL Server 2012 remnants are unsupported and no longer receive security patches.
- Security Awareness Training — Not currently in place; recommended as a proactive addition.
Strategic IT projects and improvements recommended for Fairbanks Community Food Bank in the coming period.
| Initiative | Priority | Timeline | Rationale |
|---|---|---|---|
| Enforce MFA for all users | High | Next 30–60 days | Closes the largest identity security gap; highest Secure Score impact |
| Renew Meraki network hardware licensing | Medium | Before November 2026 | Firewall, switch, and access point licensing renews November 3, 2026 |
| Retire legacy QuickBooks 2013 desktop & SQL Server 2012 remnants | Medium | Next 2–3 months | Unsupported software no longer receives security patches |
| Phased workstation replacement (9 out-of-warranty devices) | Medium | Next fiscal cycle | Avoids reactive, unbudgeted replacement purchases |
| Implement security awareness training | Medium | Next quarter | No formal program in place; reduces risk from phishing & credential theft, the leading threat to nonprofits |
| Microsoft 365 directory cleanup (disabled & duplicate accounts) | Low | Ongoing | Reduces attack surface and administrative overhead |
Cisco list / MSRP pricing — actual pricing may vary.
| License | 1-Year | 3-Year |
|---|---|---|
| MX68 Advanced Security (x1) | $735.57 | $1,654.77 |
| MS120-48LP Enterprise (x1) | $259.91 | $585.04 |
| MR Enterprise (x4 APs) | $802.80 ($200.70 ea) | $1,806.32 ($451.58 ea) |
| Total | ~$1,798 | ~$4,046 |
- Proactive monitoring and patching across all 23 managed devices via RMM.
- Datto BCDR and SaaS Protection actively safeguarding server and Microsoft 365 data.
- Meraki-managed network delivering stable, centrally managed connectivity across the office.
- SentinelOne endpoint protection reporting healthy status fleet-wide, with no gaps identified.
- Meraki network hardware licensing (firewall, switch, and access points) renews November 3, 2026 — see cost estimate above.
- Phased workstation replacement budget for the 9 devices currently past warranty.
- Potential costs associated with retiring legacy QuickBooks 2013 and SQL Server 2012, pending confirmation of migration status.
- Strengthening identity security as the top priority, closing the gap Microsoft Secure Score consistently flags.
- Consolidating legacy systems (QuickBooks 2013, SQL Server 2012) to reduce unsupported-software risk.
- Keeping infrastructure investments proactive rather than reactive — starting with the Meraki network licensing renewal this fall.
Thank you, Fairbanks Community Food Bank.
We appreciate the trust you place in Vicinity to support your business. Our commitment is to keep your IT reliable, your data secure, and your team focused on what matters most.
Questions? Reach us anytime at support@vicinity.team · (866) 520-6414