STATECRAFT

TECHNOLOGY PARTNERS

Municipal & Critical Infrastructure | MA • RI • VT

Cyber Ready Pack

A fixed-scope foundation that helps towns meet insurance evidence requests and cut ransomware downtime risk—without 24/7 monitoring.

Fast 6–8 week delivery

Insurance-aware proof for MFA, backups, IRP/TTX, logging

Low lift for small IT teams; quarterly validation optional

Flexible à la carte add-ons sized to town budgets

What’s included

MFA Enablement

Enforce MFA on M365/Google, VPN, firewall/RDP. Provide admin reports and screenshots.

Backups & Restore Check

Validate jobs and perform a test restore. Provide logs and a simple recovery checklist.

IR Plan + Tabletop

Custom IRP plus a 1–2 hour tabletop for leadership. Deliver a short after-action note.

Logging Baseline

Enable core audit logs and set 30–90 day retention. Export a sample for claims review.

Vulnerability Snapshot

Baseline scan with a prioritized fix list. Patch verification optional.

Evidence Binder

Single PDF/zip with artifacts your insurer typically asks for at renewal or post-event.

Mapped to common insurance questions

Insurer asks…

Statecraft delivers

Evidence

Is MFA enforced?

MFA rollout & review

Admin reports, screenshots

Are backups tested and protected?

Job review + restore test

Backup logs, test report

Do you have an IR plan and exercises?

IRP + 1 tabletop

IRP PDF, AAR summary

Are logs retained centrally?
Logging baseline
Policy excerpt, sample export
Is patching/vuln mgmt tracked?
Vulnerability snapshot
Scan report, fix notes

Packages & pricing

Essentials

Best for small towns and districts starting their journey.
  • MFA, backups (with test), IRP/TTX, logging baseline, vuln snapshot, evidence binder

$30K–$50K

typical small municipality

Evidence-Ready

Adds recurring validation without 24/7 monitoring..
  • Essentials + quarterly backup test & log check + annual TTX refresh

$700–$1,200/mo

after initial delivery

À la carte

Service

Fixed fee

MFA rollout (per platform)
$5,000
Backup restore test + report
$2,000
Tabletop exercise (1 day)
$1,500
Insurer evidence binder
$2,000
Vuln scan + fix plan
$1,000–$2,000
.gov domain assistance
$4,000–$8,000

Pricing varies with size and complexity. No absolute guarantees—controls reduce exposure and improve claim readiness.