1.Risk Appetite is the amount and the type of risks an organization is willing to take in or absorb. This is the amount and type of risk an organisation will pursue or retain.
Notes (1): is the aggregate level and types of risk the board and executive management are willing to assume to achieve an organisation’s strategic business objectives.
Notes (2): is consistent with applicable capital, liquidity, and other requirements and constraints.
2. Amount and type of risk that an organization is willing to pursue or retain.
(Source: ISO 22301:2012 – Societal Security – Business Continuity Management Systems - Requirements) - clause 3.49
3. Total amount of risk that an organizationis prepared to accept, tolerate or be exposed to at any point in time. (Source: British Standard BS25999-1:2006 Code of Practice for Business Continuity Management)
4. Willingness of an organization to accept a defined level of risk.
