Risk Appetite

1. Risk Appetite is the amount and the type of risks that an organization is willing to take in or absorb. The amount and type of risk that an organisation is willing to pursue or retain. Related Terms: Risk Likelihood, Risk Impact, Risk Rating, Risk Assessment, Risk Level, Period of Disruption. Notes (1): Notes (2): Notes (3): Analysing And Reviewing The Risks For Business Continuity Planning BCMBoK Competency Level BCMBoK 2: Risk Analysis & Review CL 2B: Intermediate (BC) BCMBoK Competency Level BCMBoK 2: Risk Analysis & Review CL 2C: Intermediate (CM) BCMBoK Competency Level BCMBoK 2: Risk Analysis & Review CL 2D: Intermediate (DR)   Courses Attend: Classroom: Risk Analysis Courses Attend: Classroom: Competency-based Risk Analysis Courses Attend: E-Learning: Risk Analysis module (Source: Business Continuity Management Institute - BCM Institute)

BCM Institute Risk Ratings and Levels.jpg

2. Amount and type of risk that an organization is willing to pursue or retain.

(Source: ISO 22301:2012 – Societal Security – Business Continuity Management Systems - Requirements) - clause 3.49

3. Total amount of risk that an organizationis prepared to accept, tolerate or be exposed to at any point in time.
(Source: British Standard BS25999-1:2006 Code of Practice for Business Continuity Management)

4. Willingness of an organization to accept a defined level of risk.

(Source: Business Continuity Institute - BCI)

(Source: ENISA - the European Network and Information Security Agency. BCM & Resilience Glossary)