The broad, baseline amount and type of risk an organization is willing to accept in pursuit of its strategic objectives. Set by senior leadership and the board. Distinct from risk tolerance, which specifies the acceptable operational variance around specific risk thresholds.
Want to actually apply concepts like this instead of just reading definitions?
Practice free on Zamlom