An organization's willingness to take and accept various types of risk.

• A. Risk Profile
• B. Risk Appetite
• C. Risk Tolerance
• D. Risk Exposure

Answer: (A)

The concept here is risk appetite. It describes the amount and types of risk an organization is willing to pursue or accept in order to achieve its objectives, serving as a strategic boundary that guides decisions, investments, and controls. For example, a company with a high risk appetite may pursue innovative ventures with uncertain outcomes, while a company with a low risk appetite will favor safer, more predictable options.

Risk profile, by contrast, describes the current mix of risks the organization faces—the types, sources, and potential impacts as they exist today. Risk tolerance refers to the specific thresholds or limits for variations from objectives—how much deviation is acceptable in areas like time, cost, or scope. Risk exposure is the actual level of risk present, combining likelihood and impact of identified risks.