Risk Appetite

Risk appetite is the level of risk an organization is willing to accept in pursuit of its business objectives. It defines the outer boundary for third-party cyber risk management decisions, including which vendor relationships to enter, what risk tiers to establish, and what residual risk is acceptable.