Risk appetite, stated usefully

Most statements are unfalsifiable and therefore decide nothing.

Boards adopt appetite statements saying the organisation has a low appetite for regulatory risk and a moderate appetite for commercial risk. As written these are agreeable and cannot be applied to any actual decision, because no proposal is ever described as increasing regulatory risk by an amount that can be compared to a stated tolerance.

A statement becomes useful when it names something the organisation will not do, or a threshold at which a decision escalates. We will not enter a market without local legal review. We will not accept a single customer above a stated share of revenue. Any exposure above a stated figure goes to the board. Those are testable and they change what happens.

The reason such statements are rare is that each one forecloses something, and the people drafting the statement are the people who would be foreclosed. Generic language survives review precisely because it constrains nobody.

The test is to take a real decision from the last year and ask whether the appetite statement would have determined the answer. If it would not have, it is a description of temperament rather than a control.

The other function of an appetite statement is to protect the people making decisions lower down. Somebody declining an opportunity that falls outside a stated boundary is applying a decision already made rather than exercising personal judgement against commercial pressure, and that difference matters a great deal when the decision is questioned afterwards.