Risk appetite defines the boundaries within which an organization operates, balancing opportunity against potential loss. It is typically expressed through qualitative statements and quantitative metrics such as maximum acceptable loss thresholds or variance from targets. A bank, for example, might define its risk appetite as accepting no more than 2% credit default rate annually while pursuing growth in commercial lending. Senior leadership approves the risk appetite statement, which cascades into risk tolerances and limits across business units.