Risk Appetite and Risk Tolerance: It Takes Two to Tango
Risk Appetite and Risk Tolerance are two terms that are vital to any Enterprise Risk Management (ERM) Program. They are defined as the amount and type of risk an organization is willing to accept (Risk Appetite) and the specific maximum risk that any organization will take to pursue any one business objective (Risk Tolerance). The reason that ERM is defined by these two terms is that every company must take on some risk to reach its profit margins, but the ultimate question is, “How much risk are you going to take on and how are you identifying your key risks?”