Risk appetite is the amount and type of risk your organization is prepared to accept in pursuit of its objectives. It’s not the same as risk tolerance, and it’s certainly not a one-size-fits-all concept.