Organizations encounter risk every day as they pursue their objectives. Risk appetite — the amount of risk organizations are willing to accept in pursuit of their objectives — is an integral part of an effective ERM system. This thought paper aims to help organizations develop, better articulate, and implement “risk appetite.” It provides examples of statements of risk appetite and emphasizes the notion that risk appetite should be clearly defined, communicated by management, embraced by the board, and continually monitored and updated.

See: Press release

COSO web site: Thought Paper