Risk Appetite

{
  "id": "MLC-T-CYB-003594",
  "term": "Risk Appetite",
  "field": "Cybersecurity",
  "definition": "1. The types and amount of risk, on a broad level, [an organization] is willing to accept in its pursuit of value.\n\n2. The broad-based amount of risk an organization is willing to accept in pursuit of its mission/vision.\n\n3. The types and amount of risk, on a broad level, an organization is willing to accept in its pursuit of value.\n\n4. The broad-based amount an enterprise is willing to accept in pursuit of its mission/vision.",
  "references": [
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update] from NISTIR 8286; NIST SP 800-221 from COSO Enterprise Risk Management; NISTIR 8286 from COSO Enterprise Risk Management",
    "NIST SP 800-221 from OMB Circular A-123",
    "NISTIR 8170",
    "NISTIR 8286 from OMB M-16-17",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/risk-appetite/"
}