Risk appetite that helps people make a decision

The board has approved a moderate appetite for commercial risk and a low appetite for operational disruption. The statement is sensible, carefully worded and unlikely to provoke disagreement.

Then management brings a major customer contract that would stretch delivery capacity. Does moderate mean accepting the opportunity? Does low mean refusing it? Two capable people can read the same statement and reach opposite answers.

Risk appetite earns its place when it helps resolve a choice like this before the business has already made the commitment.

Start with decisions people recognise

Take a few choices the company regularly faces: entering a market, extending customer credit, changing a critical system or accepting reliance on one supplier.

Ask what the board is willing to put at risk, for what purpose and subject to which safeguards. Some boundaries can be expressed in numbers. Others need clear conditions, particularly where people, conduct or reputation are involved.

The result should help a manager explain why a proposal falls within their authority, why it requires approval or why it should not proceed. A description of the company's general temperament cannot carry that weight on its own.

Give the limits an owner

For each material limit, identify who monitors it, how often the information is updated and who acts if it is approached or breached. Distinguish an early warning from a boundary that requires immediate action.

Allow for the time needed to respond. Reporting a shortage of capacity after the delivery promise has been signed gives the board a much narrower set of options.

Where exceptions are possible, specify who may approve them, for how long and on what evidence. Temporary exceptions need an end date and follow-up. Otherwise, they quietly become the way the business operates.

Look at the risks together

Imagine a business entering a new country while replacing its finance system and reducing headcount. Each proposal may fit its individual limit. Together, they may depend on the same small group of experienced people.

The board should ask which exposures share a cause or a dependency. Test plausible combinations and the effect on the company's ability to operate, pay its obligations and serve customers.

A collection of acceptable individual risks can still produce an unacceptable overall position. Management needs a way to bring that combined picture forward, including when nobody has crossed a formal limit.

Listen to what exceptions reveal

Regular requests for permission may mean the boundaries are unrealistic, the strategy has changed or managers are being rewarded for taking risks the board says it does not want.

Examine the pattern before simply tightening the wording. Review incentives, actual behaviour and whether people feel able to report concerns early.

Revisit the appetite when circumstances materially change, recording why the board has altered its judgement. The value lies in a shared understanding that guides the next decision. If staff still need to guess what the board would accept, there is more work to do.