IT Examiner School - Oct 2023

Risk Appetite

Risk appetite is the amount of risk, on a broad level, an organization is willing to accept in pursuit of its mission.

How much risk is an organization willing to accept to achieve its objectives?

Risk appetite is not just a part of risk and risk management discussions, it is a key component in strategic planning and day-to-day decision making.

29

29

Question 3 Who sets the Risk Appetite for the organization?

A. CEO B. The Board

C. CISO D. CRO

30