Which of the following best distinguishes risk appetite from risk tolerance in an ERM governance context?
-
A
Risk appetite is operational; risk tolerance is strategic
-
B
Risk appetite is the amount of risk desired to pursue strategy; risk tolerance is the acceptable variance around that level
-
C
Risk appetite is set by regulators; risk tolerance is set by the board
-
D
Risk appetite applies only to financial risks; risk tolerance applies to all risk categories