What should a risk appetite statement communicate to the organization?

What should a risk appetite statement communicate to the organization?

• A. The legal limits of risk exposure for tax purposes.
• B. The level and type of risk the organization is willing to accept; guides decisions, risk limits, resource allocation.
• C. The exact investments to make in every project.
• D. The day-to-day operational procedures.

Answer: (B)

A risk appetite statement communicates the level and type of risk the organization is willing to accept; it serves as a guide for decisions, sets risk limits, and informs how resources are allocated. It translates strategic objectives into practical boundaries, so managers know which initiatives to back and which to avoid based on the risk they’re prepared to take. This helps ensure consistency in decision-making across projects, programs, and departments and keeps activities aligned with the organization’s goals. It’s not about legal tax limits, nor about prescribing exact investments for every project, nor about day-to-day procedures. Those aspects are separate: tax rules are regulatory, project-by-project investments are specific decisions downstream, and operational procedures govern daily activity. The appetite statement stays at the strategic level, shaping governance, capital allocation, and risk monitoring.

A risk appetite statement communicates the level and type of risk the organization is willing to accept; it serves as a guide for decisions, sets risk limits, and informs how resources are allocated. It translates strategic objectives into practical boundaries, so managers know which initiatives to back and which to avoid based on the risk they’re prepared to take. This helps ensure consistency in decision-making across projects, programs, and departments and keeps activities aligned with the organization’s goals.

It’s not about legal tax limits, nor about prescribing exact investments for every project, nor about day-to-day procedures. Those aspects are separate: tax rules are regulatory, project-by-project investments are specific decisions downstream, and operational procedures govern daily activity. The appetite statement stays at the strategic level, shaping governance, capital allocation, and risk monitoring.