Risk Appetite
Risk appetite defines the aggregate level and types of risk an organization is willing to assume within its capacity.
Risk-appetite and risk-retention concepts for setting boundaries, accepting residual exposure, and governing risk-taking decisions.
Risk appetite and retention decisions define which exposures an organization is willing to assume, which must be limited or treated, and which residual losses will remain with the organization. Start with the broader meaning of Risk when the question is about uncertainty or loss types rather than governance boundaries.
Risk Appetite explains how strategy, capacity, limits, monitoring, and escalation define risk-taking boundaries. Risk Retention explains deliberate acceptance of a defined loss exposure rather than transferring all of it.
These concepts are related but not interchangeable. Appetite is an approved boundary; retention is a treatment decision for a specific exposure. A risk can fit the appetite and still require controls, capital, liquidity, insurance, monitoring, or an explicit exception.
| Question | Risk appetite | Risk retention |
|---|---|---|
| Main purpose | Define aggregate types and levels of acceptable risk | Decide which specified loss consequences remain internal |
| Typical evidence | Capacity, strategy, limits, risk profile, stress results | Exposure estimate, control effectiveness, transfer cost, reserve or funding plan |
| Approval focus | Board or delegated governance boundary | Authorized owner for the exposure and treatment |
| Monitoring | Profile against appetite, limits, and escalation thresholds | Actual losses, funding adequacy, control performance, and trigger conditions |
Before approving either decision, identify the exposure, owner, horizon, credible loss, control assumptions, funding source, and escalation trigger. These pages provide financial education and do not determine an appropriate risk level, insurance structure, investment position, or governance framework for a particular person or organization.
Choose a subsection first. Deeper term pages live inside each subsection, which keeps large topic hubs readable.
Risk appetite defines the aggregate level and types of risk an organization is willing to assume within its capacity.
Risk retention is the deliberate decision to bear a defined loss exposure instead of transferring all of it.