This paper makes an original contribution to the responsible research and innovation (RRI) discourse, with an inquiry into the extent to which risk, risk assessment, or risk management, including ethical and social issues, is relevant to companies. As a core component of the higher or "meta-responsibility" of RRI, an investigation of practices and attitudes towards risks can provide us with a window into companies' attitudes towards responsible innovation that is rooted in real-world experiences. Drawing upon data from 30 in-depth interviews and a large Delphi study, we reveal different underlying attitudes towards risk governance for individuals working in the information and communication technology (ICT) industry. For some companies, there is already an obvious degree of alignment with RRI values. For others, framing of the RRI discourse in terms of ethical and societal risks may help to promote understanding and uptake. Results from the interviews suggest that lack of awareness of the full extent of ethical and societal risks associated with research and innovation in the ICT industry may act as a barrier to engagement with RRI, and educational activities may be needed to rectify this situation. Results from the Delphi survey suggest that when presented with simple information about potential ethical and societal risks, industry personnel can easily recognise the main risks and provide clear opinions about how they should be addressed. The relationship between risk governance and RRI warrants further investigation as it is an essential facet of RRI.