How do risk appetite and risk tolerance differ in guiding decision making?

• A. Risk appetite is the acceptable variance around objectives.
• B. Risk appetite is the exact risk threshold.
• C. Risk appetite is the day-to-day risk decisions.
• D. Risk appetite is overall level and type of risk the organization is willing to pursue.

Answer: (D)

Risk appetite sets the broad, strategic boundary for risk taking—the overall level and the types of risk an organization is willing to pursue to achieve its objectives. It guides how ambitious the organization intends to be, what areas it wants to grow in, and how it allocates resources at a high level. In contrast, risk tolerance translates that appetite into specific, actionable limits for day-to-day decision making—defining measurable thresholds, triggers, and acceptable variances that tell managers when to escalate or adjust actions.

So the statement that best captures how risk appetite guides decision making is that it describes the overall level and type of risk the organization is willing to pursue. The other ideas reflect tolerance-related concepts: acceptable variance around objectives relates to tolerance, exact risk thresholds are about tolerance levels, and day-to-day decisions are governed by tolerance and operational risk controls rather than appetite.