What Risk Appetite Means
Risk appetite is the highest residual level your organization is willing to accept. Any risk whose residual level sits above appetite is flagged as over appetite so it rises to the top of your attention.
Set the Appetite Level
- Open Compliance, then Risks.
- Click Risk appetite in the header.
- Choose the highest level you will tolerate: low, medium, high, or critical.
- Save. ISO Mate recalculates the over appetite flag for every risk in your account.
Appetite by Category
Appetite often differs by the kind of risk. In the same dialog you can set an override per category, for example a lower appetite for security than for operational risk. When a category has an override, ISO Mate evaluates risks in that category against it; otherwise the account default applies. Changing a default or an override recalculates the flag for every affected risk.
Where Over Appetite Appears
Risks above appetite are marked in the register, highlighted on the dashboard summary, and counted in the heatmap totals and reports, giving leadership a clear view of where action is needed.
Choosing a Level
A lower appetite surfaces more risks for attention. Many teams start at medium, which flags high and critical residual risks, then adjust as their programme matures.