This is a Reach (i.e. non-regulatory) announcement and the information contained is not considered to be material or to have a significant impact on management's expectations of the Company's performance.

18 August 2025

Acuity RM Group plc

("Acuity", the "Company" or the "Group")

First customer win for new product

The directors of Acuity are delighted to announce the first customer win for Acuity's new Vendor Management Hub ("VMH"), which manages cybersecurity connections with suppliers.  VMH is available as stand-alone product or it can be incorporated in STREAMÒ.  VMH is a new product enabling users to better manage their cybersecurity risks relating to their suppliers' systems, addressing the same market as Rizikon, the product acquired by the Group in November 2024. 

Whilst the value of the first contract is small, the market opportunity for VMH is substantial.  A number of the high profile cybersecurity breaches in spring 2025 were caused by hackers accessing IT systems via suppliers' IT systems.  The cost of those breaches was measured in tens and hundreds of millions of pounds.  At Infosecurity, a recent exhibition attended by Acuity, VMH was the focus of intense interest from potential customers.

VMH provides a strong foundation for cyber risk oversight, without the complexity of a full Governance, Risk and Compliance ("GRC") program.  VMH connects automatically and seamlessly with STREAMÒ to provide additional surveillance and security functions. 

Reasons to use Acuity's VMH

·    Accelerates and standardises vendor onboarding - streamlines the process with automated workflows, standardised assessments and digital document management

·    Automates prioritisation of third party risks based on the criticality of the supplier and potential impact of the vulnerability

·    Improves risk visibility - real time monitoring of critical measures with automated risk scoring and alerts

·    Ensures regulatory compliance - with built in compliance records, automated monitoring and audit-ready documentation

Market opportunity

There is a clear market opportunity for VMH. It is a powerful entry level product that enables users to manage a key area of cybersecurity risk, controlling access to the organisation's systems from a third party's systems.  This type of risk is increasingly being managed by automated tools such as Acuity's VMH.  The small and medium enterprises segment of the market currently accounts for 68% of overall GRC revenues.  The market is expected to grow at 15% pa up to 2030. (grandviewresearch.com). At Infosecurity, a recent exhibition attended by Acuity, VMH attracted strong interest from potential customers.

David Rajakovich, Chief Executive, commented: "VMH broadens Acuity's market opportunity into a wider arena - mid-market organisations that still need to manage third party risk.  It is a relatively inexpensive, entry-level product that appeals to any organisation serious about managing supplier cyber security risk. VMH is a natural starting point for launching a comprehensive cybersecurity solution."

A demonstration of VMH can be seen on the Company's website and can be personalised to specific situations. (https://acuityrm.com/platform/vendor-management-hub)

Note to Editors

Acuity RM Group plc (AIM: ACRM), is an established provider of risk management products and services. Its award-winning STREAM® software platform collects and analyses data to improve business decisions and management is used by clients operating in markets including government, defence, broadcasting, utilities, manufacturing and healthcare.

The Company is focused on delivering long term, sustainable growth in shareholder value from organic growth and complementary acquisitions.