Reciprocity

Reciprocity, which rebranded to RiskOptics in March 2023, was founded in 2009 by Ken Lynch. Lynch, an MIT graduate with a degree in Computer Science and Electrical Engineering, established the company with the mission to help organizations engage employees with their governance, risk, and compliance (GRC) goals. His vision stemmed from a partnership with Google to develop software for managing their information security risk and compliance program.

The company operates in the information security, risk, and compliance market, providing a Software-as-a-Service (SaaS) solution for businesses ranging from small and medium-sized enterprises to large corporations. The business model is centered on subscriptions to its GRC platform, which aims to move risk and compliance from being a cost center to a value creator for organizations. In September 2022, the company secured a significant $60 million strategic growth investment from Francisco Partners, a global investment firm specializing in technology businesses, to accelerate product innovation and go-to-market activities.

The core product, initially known as ZenGRC and later evolving into the Risk Observation, Assessment, and Remediation (ROAR) Platform, is designed to streamline GRC processes. The platform provides a centralized system for managing multiple regulations and standards, automating evidence collection, and offering real-time monitoring to identify, assess, and mitigate risks. Key features include audit and compliance management, vendor risk management, policy management, issue tracking, and workflow automation. The ROAR platform specifically aims to tie an organization's IT and cyber risks directly to its business strategy, providing actionable insights and quantifying the value of security investments. It integrates with popular business applications like ServiceNow, AWS, Slack, and JIRA to automate information flow and enhance collaboration.

Keywords: GRC, risk management, compliance management, information security, ZenGRC, ROAR platform, cyber risk, audit management, vendor risk management, policy management, risk assessment, continuous monitoring, IT risk management, regulatory compliance, Ken Lynch, RiskOptics, security compliance, risk quantification, business process, security governance