Monday Upbeat Markets: Interview with David Rajakovich (CEO)

A candid discussion on Acuity's turnaround, STREAM® Cloud, and the next phase (RiskOS).

In this episode of Monday Upbeat Markets, Acuity Risk Management CEO David Rajakovich discusses the company's operational reset since December 2024, including a lower cost base and profitability achieved in Q4 2025. He also explains how STREAM® Cloud expands Acuity's reach into the mid-market with a lightweight, easy-to-start CyberGRC platform, while STREAM® Classic continues to serve complex and public sector environments. The conversation closes with a look ahead to RiskOS, a product in development designed to support board-level visibility and action on cyber risk.

Watch the interview

Key moments

• 00:00–00:19 — Podcast disclaimer
• 00:29–03:36 — CEO background + turnaround context + Q4 2025 profitability
• 03:43–07:34 — STREAM® Cloud launch + positioning
• 07:37–10:04 — Strategic focus + mid-market expansion
• 10:23–14:58 — Board reporting + practical explanation of STREAM® Classic
• 15:06–18:39 — Tailwinds (regulation) + third-party risk + public sector base + commercial growth
• 18:43–21:14 — Closing remarks

Key highlights

• Operational turnaround: cost base reset, focus on CyberGRC, profitability in Q4 2025
• STREAM® Classic vs STREAM® Cloud: enterprise/public sector configurability vs mid-market ease-of-use and fast start
• Growth model: serving both existing customers and new mid-market buyers, with an upgrade path as needs mature
• Partner leverage: simpler onboarding that enables partners to deliver more independently
• What's next: RiskOS direction, including board-facing reporting and prioritised action on cyber risk

"STREAM® Cloud opens up a whole new customer segment… below complex enterprise sales."

What Acuity RM does

Acuity is a software and services provider for cybersecurity governance, risk management, and compliance. Our award-winning STREAM® platform is used by organisations worldwide to efficiently achieve, maintain, and demonstrate effective cybersecurity management systems, including certification to ISO 27001, compliance with a wide range of other cybersecurity standards such as NIST CSF, and a risk-based approach to third-party cybersecurity risk management.