Risk Appetite Statement
What is Risk Appetite Statement?
A formal document expressing the board-approved levels and types of risk an organization is willing to accept in pursuit of its objectives.
Terms that appear alongside risk appetite statement
Each of these is named in at least one of the same controls as risk appetite statement. The number is how many controls name both.
- risk appetite 22 shared controls
- compliance 10 shared controls
- governance 10 shared controls
- audit 9 shared controls
- risk management framework 7 shared controls
- material risk 6 shared controls
- risk governance 6 shared controls
- governance framework 6 shared controls
Frameworks that govern risk appetite statement
What the standards actually require on risk appetite statement
Requirements naming risk appetite statement across 6 standards, quoted from the control text.
The framework should require review and approval of the risk appetite statement by the board or its risk committee at least annually, or more often with the size and volatility of risks and material changes in business model, strategy, risk profile or market c...
occ-heightened-standards-12-cfr-part-30-appendix-d::II.G.1 · II.G.1 Annual board approval of the risk appetite statement →The institution must maintain an appropriate, clear and concise risk appetite statement addressing its material risks, with the Board responsible for setting risk appetite and required to approve the statement.
CPS220-06 · Risk Appetite Statement →The RSE licensee must maintain an up to date risk appetite statement covering its business operations and each category of material risk, approved by the Board.
SPS220-19 · Risk Appetite Statement →The insurer must have a risk appetite statement that articulates the aggregate level and types of risk it will assume within its risk capacity to achieve its financial and strategic objectives and business plan, takes into account all relevant and material ris...
iais-insurance-core-principles-icps::16.4 · 16.4 A risk appetite statement covering aggregate risk, all material risk categories and operationalised through risk limits →Catastrophe exposure is kept within the agreed appetites and tolerances. Baseline for natural and non-natural perils alike: there are risk appetite statements, exposures are monitored against them and reported to the board and senior management, and business p...
principles-for-doing-business-at-lloyd-s::P2.1 · 2.1 Manage catastrophe exposure within agreed risk appetites and tolerances →A cyber risk appetite statement exists and has been approved by the board or its committee.
ffiec-cybersecurity-assessment-tool-cat::D1.G.Ov.Int.3 · D1.G.Ov.Int.3 Oversight (Intermediate 3) →Questions people ask about risk appetite statement
What is Risk Appetite Statement?
Why is Risk Appetite Statement important for compliance?
Which compliance frameworks address Risk Appetite Statement?
Where can I learn more about Risk Appetite Statement?
See how Risk Appetite Statement applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.