Partner with Acuity: build cyber risk into what you already deliver
Acuity Risk Management builds STREAM, the cyber governance, risk and compliance platform for organisations that need to prove their security, not just describe it.
Last updated: 8 October 2026
Our partners bring STREAM to their clients through the work they already do: assessing, advising, managing and supplying.
Who the Acuity partner programme is for
Five kinds of firm partner with Acuity. Each has its own track, and many partners use more than one.
Certification bodies and assessors
Help clients hold the evidence that assessments demand.
Managed service providers
Run cyber risk for your own business and, as a service, for your clients.
GRC and security consultancies, including vCISO practices
Run client programmes on a platform, not spreadsheets.
Technology resellers
Add cyber GRC to your portfolio, with authorised training and consulting services.
Referral partners
Introduce Acuity and earn a fee on qualifying referrals.
Certification bodies and assessors
Your clients' certificates are only as strong as the evidence behind them.
Under the Defence Cyber Certification scheme run by IASME for the MOD, a supplier cannot move up a level by adding the missing controls. Each step is a full new assessment: 3 controls at Level 0, 101 at Level 1, 139 at Level 2 and 144 at Level 3. Once certified, the supplier attests every year that it still meets and maintains those controls.
| DCC level | Controls assessed |
|---|---|
| Level 0 | 3 |
| Level 1 | 101 |
| Level 2 | 139 |
| Level 3 | 144 |
STREAM gives your clients one place for the risks, controls, owners and evidence those assessments need, so they arrive prepared and stay prepared between assessments.
Your role as assessor is unchanged. IASME separates assessment from implementation consultancy, and our partnership is built the same way: STREAM helps the client prepare, and the assessment stays independent.
STREAM does not certify anyone. Certificates are issued only by IASME's assured certification bodies.
Managed service providers
The Cyber Security and Resilience Bill brings managed service providers into the UK's network and information systems (NIS) regime for the first time.
The Bill is still before Parliament, and the duties for MSPs will start through later regulations, so this is time to prepare, not a deadline to panic about. Your clients will not wait for the regulations. Defence suppliers certifying under DCC must show that controls an MSP runs for them are met, and from 18 March 2027 many FCA and PRA regulated firms must report their material third party arrangements, which can include IT service providers.
STREAM gives you a structured way to run cyber risk, controls and evidence for your own business first, and then as a managed service for your clients.
How STREAM supports MSPs under the Cyber Bill →GRC and security consultancies
Run every client's cyber risk programme from one platform instead of a folder of spreadsheets.
The consultant partner programme is open to large, medium and small firms and to sole traders working in governance, risk and compliance, including virtual and fractional CISO practices. You get access to STREAM experts to support implementations, plus training and documentation for your team.
Technology resellers
Build cyber GRC revenue alongside the security products you already sell.
Reseller partners can offer authorised STREAM training and consulting services, backed by Acuity's sales tools and enablement materials.
Referral partners
If you advise organisations that need to manage cyber risk but STREAM is not part of your own service, introduce them to us.
Acuity pays fees for qualifying referrals under the terms of the STREAM Referral Programme.
What Acuity gives its partners
- Sales tools and enablement materials, including training and documentation.
- Access to STREAM experts to support your implementations.
- Go-to-market support, including sales leads where they fit your specialism.
- A clear route to the right STREAM edition for each client.
Which STREAM edition fits your clients
STREAM Cloud
For organisations replacing spreadsheets and manual trackers that want structure quickly. Risks, controls, assets and actions in one place.
STREAM Classic
For mature programmes that need deeper automation, more advanced modelling and broader configurability, including more controlled operating environments.
Vendor Management Hub
For supplier assurance, assessing the cyber risk of the third parties your clients depend on.
How partnering with Acuity works
Tell us about your firm using the form below.
Meet the partner team for a short introductory call.
Agree the programme and terms that fit how you work.
Get trained and supported through your first client.
Partner programme FAQs
Answers to common questions about partnering with Acuity.
Interested in partnering?
Tell us about your firm and the partner team will suggest the right programme.
Solve Your Challenges with STREAM®
Discover how STREAM®, our Cyber GRC platform, can help you address these challenges and streamline your compliance and risk management processes.