Risk appetite is a key component of enterprise risk management – it refers to the amount and type of risk that an organisation is willing to pursue or retain. Willingness to bear risk can be defined in two ways:
Defining and implementing risk appetite (increasingly referred to as a risk attitude) is a strategic activity that involves the Board and top management, as it must be aligned with strategic objectives, and requires consensus and engagement from the organisation’s leadership.