Risk appetite
From ACT Wiki
Broadly the amount of risk that an organisation is willing to accept in pursuit of value, improved financial performance or of other benefits, with management responsible for setting boundaries or parameters for risk taking.
Any risk responses should be designed such that the 'net' (residual) risk after considering controls does not exceed these boundaries.
