Acuity Risk Management is a provider of cyber GRC solutions founded in 2014 and headquartered in London. The company develops and delivers STREAM®, a Cyber GRC platform that integrates governance, risk management, compliance automation, continuous monitoring, and risk quantification capabilities.

The STREAM® platform enables organizations to identify, assess, and manage cybersecurity, IT, and operational risks through a centralized system. The platform features no-code configurability, integration with over 100 security tools, and financial risk quantification using Monte Carlo simulation. It supports compliance with various regulatory standards including ISO 27001, NIS2, and other frameworks.

In 2023, Acuity acquired Rizikon to expand capabilities in cyber risk quantification and third-party risk management. The platform includes specific modules for vendor management, enabling organizations to conduct risk-based supplier assessments, continuous monitoring, and third-party risk reporting.

Acuity serves organizations across multiple sectors including financial services, healthcare, technology, manufacturing, data center services, and travel management. The platform addresses use cases such as information security management systems (ISMS), compliance reporting, risk assessment workflows, policy management, and physical security management.

Acuity Risk Management Limited operates as a wholly owned subsidiary of Acuity RM Group plc, which trades on the London Stock Exchange's AIM market under the ticker ACRM.L. The company is led by CEO David Rajakovich and maintains a focus on delivering integrated GRC solutions designed for security and risk professionals.