IT Examiner School eBook

Risk Appetite

Risk appetite is the amount of risk, on a broad level, an organization is willing to accept in pursuit of its mission.

How much risk is an organization willing to accept to achieve its objectives?

Risk appetite is not just a part of risk and risk management discussions, it is a key component in strategic planning and day-to-day decision making.

29

Question Who sets the Risk Appetite for the organization?

A. CEO B. The Board

C. CISO D. CRO