Public Sector
A guided, evidence-based IT and cybersecurity assessment for cities, counties, and public agencies. Your organization ends up with a verified picture of the systems it runs, how they connect, and the controls protecting them.
Request a DemoWhat systems do we actually run? How do they connect to each other? What is protecting them? Answers usually live in the heads of a few staff members, in vendor contracts nobody has read in years, and in spreadsheets that stopped being updated. When a leader retires, an audit arrives, or an incident hits, that gap becomes expensive.
The Aric Assessment Portal closes that gap. Instead of a consultant's opinion delivered as a slide deck, you get a documented, evidence-backed inventory of your technology and its risks, built through a process your own department leads participate in and can stand behind.
How It Works
1
Department leads work through structured, plain-language walkthroughs in the portal, listing the systems they actually use, where they run, and how people interact with them. No technical background required, and about two hours per week per lead.
2
Answers are backed by uploaded evidence: contracts, configurations, screenshots, and documentation, held in encrypted storage. Every claim in the final report traces back to something you can show an auditor.
3
Aric analysts review every submission, follow up on gaps, and map how your systems connect. In our most comprehensive engagements, we verify documented connections against the real systems through read-only checks your organization authorizes in writing.
4
Leadership receives a written assessment report, a risk heat map, a modernization roadmap, a prioritized gap register with closure steps, systems diagrams, and a presentation built for council chambers, not server rooms.
Engagement Tiers
Three fixed-fee tiers, sized to your goals. Upgrade to a deeper tier at any time by paying only the difference.
30 days
A rapid, structured inventory of your systems and top risks. The fastest way for new leadership to understand what it inherited.
60 days
Deeper coverage across departments, including how systems integrate and how residents experience your digital services.
90 days
Everything in Comprehensive plus authorized, read-only verification of your systems' documented connections and itemized remediation costs. The prerequisite for our Resident Assistant.
Common Questions
Plan on about two hours per week per department lead during the engagement. The portal's guided walkthroughs are written in plain language and broken into short sessions, so leads answer from what they know day to day rather than researching on our behalf. Aric does the heavy lifting of review, mapping, and verification.
Not for the assessment itself: it runs through our secure portal in a web browser, with nothing deployed to your machines. The one exception is optional and yours to control: Full-Scope engagements can verify systems that are not reachable from the internet through a small relay your own staff install on your premises and can shut off at any time.
A penetration test asks whether an attacker can break in. This assessment answers the questions that come first: what you run, how it connects, what protects it, and where the gaps are. Most governments discover they need this inventory before a penetration test can even be scoped well. Aric offers security testing too, and the assessment tells you where it is worth pointing.
Your provider runs your systems; we document and verify them independently. An outside, evidence-based picture is what lets leadership evaluate the advice it gets, satisfy auditors and insurers, and survive the retirement of the one person who knows how everything fits together. Good providers welcome it, because the roadmap makes their work easier to prioritize and fund.
Your government does. The report, roadmap, and gap register are deliverables you own, and the findings, including the unflattering ones, go to you and nobody else. How and when to share them with your council or the public is your decision, and the report is written so you can.
Upgrade at any time by paying only the difference between tiers. Work already completed carries forward; nothing is repeated and nothing is repriced. Starting with Discovery is a common and sensible path.
Role-based access, encrypted evidence storage, complete audit trails, and verification that only ever runs read-only with your written authorization.
How We Secure Our PortalsThe best way to evaluate the portal is a live walkthrough with your leadership and IT staff. We will show you a complete engagement, end to end.
Request a Demo