Which statement differentiates risk appetite from risk tolerance?

Which statement differentiates risk appetite from risk tolerance?

• A. Risk tolerance is defined as the broad level willingness to take risk for value
• B. Risk appetite is the broad level of risk an organization is willing to take in pursuit of value
• C. Risk tolerance measures only financial risk
• D. Risk appetite relates to regulatory compliance only

Answer: (B)

The main idea is that risk appetite sets the overall, strategic willingness to take risk in pursuit of value, while risk tolerance translates that guidance into specific, measurable limits. When an organization articulates its appetite, it describes how aggressive or cautious it wants to be in achieving objectives—it's broad and strategic. Risk tolerance then takes that broad stance and defines exact thresholds for particular risks or categories, indicating what levels of risk are acceptable in day-to-day operations and performance. So, the statement that risk appetite is the broad level of risk an organization is willing to take in pursuit of value correctly captures this distinction. The other statements misplace the concepts: risk tolerance is not the broad level, and it isn’t limited to financial risk; risk appetite isn’t restricted to regulatory compliance.

The main idea is that risk appetite sets the overall, strategic willingness to take risk in pursuit of value, while risk tolerance translates that guidance into specific, measurable limits. When an organization articulates its appetite, it describes how aggressive or cautious it wants to be in achieving objectives—it's broad and strategic. Risk tolerance then takes that broad stance and defines exact thresholds for particular risks or categories, indicating what levels of risk are acceptable in day-to-day operations and performance.

So, the statement that risk appetite is the broad level of risk an organization is willing to take in pursuit of value correctly captures this distinction. The other statements misplace the concepts: risk tolerance is not the broad level, and it isn’t limited to financial risk; risk appetite isn’t restricted to regulatory compliance.