Risk appetite reflects the amount of risk taking that is acceptable to an organisation. As a result, risk appetite refers to the organisation’s attitude towards risk taking and whether it is willing and able to tolerate either a high or a low level of exposure to specific risks or risk groups.