Defence contractor uses STREAM® to strengthen cyber GRC and operational security processes
A defence contractor uses STREAM® to support evidence-based cyber GRC based on NIST 800-53 with MITRE ATT&CK as the threat library, and has expanded use into broader operational security processes.
The story in four lines
Customer
A defence contractor
Use Case
Cyber GRC and operational security process management for a public sector customer
What Changed
A Cyber GRC solution based on NIST 800-53, with MITRE ATT&CK configured as the threat library, supporting data-led risk-level oversight
Outcomes
Extended relationship in 2026, a fully integrated risk management framework, and expansion into broader operational security processes
The Challenge
The organisation needed to demonstrate a rigorous, evidence-based cyber risk management approach to a public sector customer. The requirement included continuous oversight of risk levels across key technology assets in multiple environments.
The Solution
STREAM® supported a Cyber GRC solution with:
- A control framework based on NIST 800-53
- MITRE ATT&CK configured as the threat library
- Current risk-level oversight using data, rather than relying only on periodic assessment snapshots
Extended Engagement in 2026
The relationship was extended in 2026. Additional consultancy supported implementation of a fully integrated risk management framework, with the work expanding into broader operational security processes, including joiner and leaver requests.
The Impact
- An evidence-based Cyber GRC approach aligned to NIST 800-53
- Threat context provided through MITRE ATT&CK as the configured threat library
- Current, data-led oversight of risk levels across key technology assets
- A fully integrated risk management framework supported by additional consultancy
- Expansion of STREAM® use into broader operational security processes, including joiner and leaver requests
Strengthen evidence-based cyber GRC and operational security processes.
See how STREAM® can support Cyber GRC aligned to recognised frameworks, current risk-level oversight, and integrated operational security processes.
Acuity Risk Management helps businesses worldwide effectively manage, prioritise and report on their risks to inform strategic decision-making and build long-term resilience.
Its powerful STREAM® platform provides rapid time to value to reassure stakeholders that risks are under control and compliance is maintained with increasingly complex standards and regulations. With STREAM®, Acuity eliminates the guesswork around risk to support strategic decision-making, prioritisation of resources and justification of expenditure to maximise ROI. With customers worldwide, Acuity has proven success supporting customers in highly regulated and targeted industries such as finance, IT, telecommunications, healthcare, defence and government.