Risk Appetite
Noun · Security & Infosec
Definitions
The amount and type of risk an organization is willing to tolerate in pursuit of its objectives. In security governance, risk appetite shapes how aggressive controls are, which exceptions are allowed, and how quickly issues must be remediated.
In plain English: How much risk an organization is willing to accept.
Example: "The company's risk appetite for public-facing identity systems was extremely low, so even moderate findings triggered immediate executive review."