Certification In Risk Management Assurance (CRMA)

Risk appetite and risk tolerance are interchangeable terms with identical meanings. Risk appetite is the broad statement of acceptable risk, while risk tolerance defines the allowable deviation around that appetite. Risk tolerance is set at the board level, while risk appetite is set by operational management. Risk appetite applies only to strategic risks, while risk tolerance applies to operational risks.