6 minute read
A More Useful Way to Think About Risk Appetite
We’ve worked with a lot of risk appetite statements across different organisations and sectors. While they vary widely in structure and maturity, the same challenge appears again and again.
Risk appetite is often written as a set of rules, rather than designed as a guide for judgement.
Most statements rely heavily on binary framing. Risks are described as accepted or not accepted, within appetite or outside appetite. This works neatly in theory, but it rarely reflects how risk actually develops or how decisions are made in practice.
Risk usually doesn’t arrive as a breach. It builds. Indicators move gradually. Pressure accumulates while everything is still technically “within appetite”.
We’ve seen teams sit through months of uncomfortable reporting because nothing had crossed a formal threshold, only to suddenly find themselves explaining why escalation felt late.
This is where posture becomes more useful than permission.
Reframing risk appetite as posture
One approach I’ve seen work consistently better is framing risk appetite using three postures:
Open. Balanced. Cautious.
These are not labels for risks themselves. They describe how an organisation intends to engage with uncertainty.
- Open
An open posture reflects deliberate exposure in support of strategic outcomes. It is where uncertainty is accepted because the organisation understands what it is trying to achieve.
For example, we’ve seen organisations take an open posture when:
- investing in new technology knowing benefits will take time to materialise
- entering new markets where early performance may fluctuate
- redesigning services to improve long‑term customer outcomes
- Balanced
Balanced describes areas where risk is actively managed and expected to move over time. This is where most organisational risk actually sits, yet it is often the least clearly articulated posture.A common example is when key metric trends the wrong way for two reporting cycles. Nothing has “breached”, but the trend is real. Balanced gives leadership permission to treat that movement as meaningful without overreacting, and to adjust early while options are still available.
Balanced creates space for judgement. When it is missing or underdeveloped, escalation tends to feel sudden and reactive rather than measured and intentional.
- Cautious
A cautious posture signals that tolerance is tightening. It does not always mean activity stops, but it does mean attention increases and options narrow.Cautious often comes into play when:
- performance is approaching tolerance limits
- issues are recurring despite existing controls
- decisions start to carry more downside than upside
An issue keeps reappearing despite controls. Everyone can explain why it’s “still within tolerance”, but confidence is dropping and the downside is becoming harder to justify. Cautious is the posture that makes earlier escalation sensible, rather than waiting for a formal breach to force the conversation.
We’ve seen cautious posture work well when it creates clarity early, prompting escalation and intervention before failure occurs, rather than waiting until there is nothing left to debate.
Why category design matters
Language alone doesn’t determine whether a risk appetite is usable. How appetite categories are structured also matters.
Many frameworks align appetite directly to traditional risk types such as financial, operational or compliance risk. These categories already exist elsewhere in the risk framework and serve an important purpose there.
Repeating them again in the risk appetite statement often adds another layer of taxonomy without improving clarity. It can also encourage mechanical rating rather than genuine discussion.
An alternative approach is to align appetite categories to strategic objective themes. When appetite is framed around things like growth, resilience, customer trust or transformation, conversations move away from classification and toward intent.
Instead of asking “what type of risk is this?”, executives start asking “does this level of risk make sense given what we’re trying to achieve?” That is usually a much more productive discussion.
Three signs your risk appetite looks fine (but isn’t working)
You can have a well‑written statement and still end up with appetite that does not influence decisions. These are three signs I see most often.
1) People only talk about appetite when something goes wrong
What it looks like: Appetite appears in a board pack as a checkbox, then suddenly becomes a headline when a limit is breached.
Why it matters: Appetite is meant to guide decisions early. If it only shows up retrospectively, it’s acting as a compliance artefact rather than a decision lens.
2) “Within appetite” becomes a comfort blanket
What it looks like: Reporting stays green, but the conversation in the room feels uneasy. Trends are sliding, exceptions are accumulating, and everyone can still technically say “we’re within appetite”.
Why it matters: When appetite language is too binary (or Balanced is too thin), you lose the ability to talk about trajectory without sounding alarmist.
3) The categories create more translation than clarity
What it looks like: People spend time debating whether something is “operational” or “compliance”, rather than debating whether the organisation is comfortable with the exposure given the objective it is pursuing.
Why it matters: Too much taxonomy encourages mechanical rating. Strategy‑aligned categories tend to pull conversations back to intent.
Where this becomes difficult, and more interesting
Open, Balanced and Cautious are deliberately simple ideas. Applying them consistently is harder.
They rely on how risk information is surfaced, how movement is discussed, and whether escalation reflects trajectory rather than just thresholds. Without that connection, even well‑designed appetite language can remain theoretical.
In practice, we’ve seen appetite have the most impact when posture is reflected in how risks are reviewed over time, not just how they are written down. That is when conversations start earlier, decisions are made with more context, and risk appetite begins to guide behaviour rather than validate it.
Want to pressure‑test your risk appetite?
If you are revisiting your risk appetite statement, or you suspect it reads well but isn’t being used well, we’re happy to talk it through.
At Battleground, we support organisations through both facilitated design and practical enablement, including using Battleground Live to bring appetite into day‑to‑day risk capture, monitoring and reporting, so it is applied consistently, not just published.
If you’d like to discuss how this could work in your context, reach out and we can set up a short conversation.
