Risk Appetite: Four Steps To Help Boards Develop a Meaningful Statement

The board of directors plays a crucial role in a company’s risk management, often having the final word on targets and thresholds.

However, many of the enterprise risk management (ERM) frameworks they rely upon provide little guidance on risk decision making.

Some frameworks, for example, do not contain a risk appetite statement that articulates the level of risk an organisation is willing to accept, including the maximum permissible departure from that objective. Other ERM frameworks use such broad, qualitative statements on risk management that they are not useful in informing a decision or strategy.

Following are four key steps a company can take to effectively develop a risk appetite framework.

1. Organise an introductory session

Educating a board on risk management, particularly ERM, before work begins on drafting a risk appetite statement can lead to a higher level of engagement.

Experience shows that asking board members for their opinions regarding unfamiliar risk topics is often unproductive, so much so that the process is sometimes discontinued.

2. Ensure a clear division of responsibilities within a company

A lack of clarity on governance, purpose, and strategy can undermine an organisation’s ability to form a strong vision on risk appetite.

For example, if a company lacks a defined allocation of responsibilities between its holding and operational companies, risk management discussions may see neither entity willing to assume the risks they perceive as being the other’s remit.

3. Establish realistic risk objectives

It is important to set achievable risk management goals. There should be alignment between the theoretical implications of an organisation’s risk appetite and its actual applications. For example, it would be illogical for a company to decide it had zero appetite for operational disruptions if the maintenance of its production facilities had been neglected.

Companies also need to determine which elements of risk appetite may need to evolve. For instance, if an organisation does not have a policy on climate change, discussions on the associated physical and transitional risks can often amount to no more than informal exchanges of opinions.

4. Organise practical training sessions

The effective development of risk appetite has been achieved by running practical sessions for boards, in addition to theoretical introduction sessions. These include “what if” exercises, where directors must decide on a course of action in response to a hypothetical scenario.

Questions for such an exercise could include:

To what extent can the company accept key business leaders leaving?
Is total service quality a mantra to stick to, or can some degree of divergence from this view be accepted?
What is the implication of varying levels of acceptance of longer payback periods?

Aligning Risk Appetite With Risk Strategy

Writing a risk appetite framework can be frustrating, resulting in endless discussions in the absence of a structured approach. Increasing a board’s risk awareness, defining key risk goals, and establishing accountabilities can help a company successfully integrate a statement with its risk management strategy.

If you have questions on risk appetite, please contact your Marsh representative.

Smiling mature businessman looking at laptop at business meeting with two women

Newsletter

Risk Appetite: Four Steps To Help Boards Develop a Meaningful Statement

1. Organise an introductory session

2. Ensure a clear division of responsibilities within a company

3. Establish realistic risk objectives

4. Organise practical training sessions

Aligning Risk Appetite With Risk Strategy

Related insights

News and views: Marsh India Newsletter

Jargon buster: Flammable gas and vapour testing

The importance of selecting credible over generic flammability test data

Jargon buster – combustible dust testing

Marsh.com Sign in

Risk Appetite: Four Steps To Help Boards Develop a Meaningful Statement

1. Organise an introductory session

2. Ensure a clear division of responsibilities within a company

3. Establish realistic risk objectives

4. Organise practical training sessions

Aligning Risk Appetite With Risk Strategy

Related insights

News and views: Marsh India Newsletter

Jargon buster: Flammable gas and vapour testing

The importance of selecting credible over generic flammability test data

Jargon buster – combustible dust testing