As regulatory pressure grows and frameworks such as NIS2 raise expectations for accountability, organisations must move beyond static risk reporting to action-led risk management. This session explores HIQA’s Integrated Risk Management (IRM) journey, showing how the organisation moved from fragmented risk visibility to a connected, evidence-driven approach across enterprise, information, and cyber domains. HIQA shares the practical drivers, design choices, and lessons learned in embedding risk into day-to-day operations—clarifying ownership, strengthening assurance, and building executive confidence—supported by ServiceNow IRM to turn risk insight into measurable, auditable action.