Between 2015 and 2018 we carried out five surveys, 85 detailed case studies, and reviewed 104 further deployments of robotic process automation (RPA). As documented in our previous reports and books, we know from this research base that the top performing RPA users ‘think strategically’, ‘start right’, ‘institutionalize fast’ and ‘innovate continuously’. These four admonitions add up to applying 30 action principles to mitigate 41 major potential RPA deployment risks. This paper focuses on two areas deserving particular attention: in our research, lack of stakeholder buy-in and poor governance emerged as major stumbling blocks towards progress and business value.