Risk Appetite, Tolerance & Governance Flashcards

Which term describes the amount and type of risk an organization is willing to accept in pursuit of its objectives?

Answer: Risk appetite

Risk appetite is the broad level of risk an organization is prepared to accept before action is needed, reflecting its strategic stance toward uncertainty.

How does risk tolerance differ from risk appetite?

Answer: Risk tolerance is the acceptable variance around specific objectives, while risk appetite is the broader strategic willingness to accept risk

Risk appetite is the overarching strategic stance, while risk tolerance defines the acceptable range of variation around a specific objective or metric.

Who is primarily responsible for defining an organization's risk appetite?

Answer: Senior leadership and the board of directors

Risk appetite is a strategic decision made at the organizational level by senior leaders and the board, reflecting corporate culture and strategic objectives.

A project team identifies a risk that falls within the organization's risk tolerance. What is the appropriate response?

Answer: Accept the risk and monitor it passively

Risks within tolerance levels are acceptable and typically require only monitoring, as they do not exceed the boundaries the organization has set.

Which governance body is typically responsible for overseeing risk management practices on large projects?

Answer: Risk management committee or steering committee

A risk management committee or steering committee provides governance oversight, ensures risk policies are followed, and makes decisions on risks beyond project authority.

What document formally establishes how risk appetite and thresholds are applied within a project?

Answer: Risk management plan

The risk management plan defines risk thresholds, tolerance levels, and governance structures that guide how risks are managed throughout the project.