Glossary
Risk appetite
Risk appetite is the amount and type of risk an organisation is willing to accept in pursuit of its objectives, as set by its board.
Risk appetite explained
Every institution takes risk to earn a return; risk appetite is the board's statement of how much, and of what kind. It is usually expressed as a set of statements and limits: for example, no tolerance for regulatory breaches, moderate appetite for credit concentration, low appetite for operational losses above a stated level.
Appetite gives the risk register its reference point. A risk within appetite can be accepted and monitored; a risk outside it needs treatment until it comes back inside. Without a stated appetite, risk scores have nothing to be measured against.
For example, a microfinance institution might state that no single sector may exceed a set share of its loan book, turning appetite into a limit that a key risk indicator can watch.
Why it matters in life insurance
Both ISO 31000:2018 and the COSO ERM framework treat appetite as the link between strategy and risk management, and Zambian regulators increasingly expect boards to have approved one. ERMAML, the Ontech Risk & Compliance Suite, lets institutions record appetite statements and limits so that residual risk scores and KRI breaches are reported against them.