The Department for Work and Pensions (DWP) is the UK’s largest government department, serving 22 million citizens and paying out over £266 billion in 2024, making operational resilience critical. This session explores how DWP has built a comprehensive resilience and security ecosystem using ServiceNow Risk and Security Operations, applying NIST CSF and CISv8 as guiding frameworks to manage controls, understand risk, and drive measurable security outcomes, while integrating capabilities including IRM, VR, TISC, SPC, SIR, CSDM, and CMDB to deliver a unified, operationally effective security model.