Risk & compliance
What is Risk appetite?
Risk appetite is the amount of risk an organisation is willing to accept in pursuit of its objectives, set by its board and used to decide which risks need treatment.
In a risk register it is usually expressed as the highest acceptable residual score; risks above it need a treatment plan or a formal acceptance by someone with the authority to accept that level of risk.
How Clateway helps
- ISO 27001 risk register and risk assessment – An ISO 27001 risk register with heat maps, risk appetite, treatment plans, acceptances and AI suggestions from your own systems, vulnerabilities and vendors.
- Technology and cyber board advisory – Independent technology and cyber expertise for boards and supervisory boards: advice on management's plans, NIS2 accountability, AI governance and director briefings.