Risk appetite: The amount and type of risk that an organization is willing to accept in pursuit of its objectives. It is a strategic concept that guides decision-making processes, indicating the balance between the potential benefits of innovation and the threats that change inevitably brings. By defining risk appetite, organizations can make informed choices, set priorities, and allocate resources effectively. Risk appetite often varies across different areas of an organization and can change over time based on various factors.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D2: Information security risk management | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index