Notes (1): is an organisation's risk-bearing capacity or risk appetite.
Notes (2): refers to a specific threshold to which stakeholders express an interest in accepting an uncertainty or impact. If the risk is below the specific risk threshold, the organization will accept the risk; above it, it will not be tolerated.