Policies, risk registers and risk committees do not necessarily mean that a company is managing risk. The system begins to add value when it helps to take better decision before a mistake becomes irreversible. This article looks at how to connect risk with business objectives, involve the risk function earlier and turn indicators into management action.