Internal Controls Design website by Matthew Leitch (tutor, researcher, author, & consultant)
New website, new perspective: - Related articles - All articles - The author - Services

Pioneer Graphic

Making sense of risk appetite, tolerance, and acceptance (2nd edition)

by Matthew Leitch, 9 August 2010 (original version 17 July 2007 and revised 30 April 2008)

A new edition of this article - why?
Introduction and key points
Control of decision making illustrated by typical 'risk appetite' approaches
The scope for improvements to decision making under limited knowledge
Planning new projects to improve decision making under limited knowledge
Decisions and ways to make them
Summary of key points
Further reading

Please note

The author is available to help with work to evaluate existing arrangements for governing risk taking, design new tools and processes, write guidance on their use, review work done using them for lessons to learn, and (in the UK) to provide relevant training.

A new edition of this article - why?

Welcome to a new edition of this article on 'risk appetite', 'risk tolerance', and related ideas and practices. The first edition focused on resolving the confusion created by the chaotic and misleading terminology used in this area of risk management. That article received considerable praise and has even been described as a 'classic'. However, things have moved on and three events have been particularly important in prompting this major update:

Introduction and key points

While the terminology and theory around 'risk appetite' may have been a mess, some of the practical initiatives attempted around it contain the seeds of greatness. The common factor in these initiatives is the attempt to influence directly by policies and their implementation important decisions taken inside organizations, in such a way that the limitations of knowledge are better handled. In other words, the aim is to get people to think effectively about 'risk' in some sense when they make important decisions. One option is to impose some overall limits on risk and overlay those on top of existing business planning and monitoring decisions, but this is only one option and not necessarily the easiest or most useful.

The decisions involved, the style of policy, and the approach to limited knowledge vary. Some techniques are better than others. However, the general desire is to reduce the incidence of decisions that are stupid, short term, narrow minded, or selfishly motivated. There is also a desire to give leaders new levers they can pull to influence people in their organizations. The general approach is to lay down some rules, or at least guidelines, focusing on 'risk' in some sense, and try to get people to follow those rules.

There is no one technique for making decisions, still less making them under uncertainty, that is theoretically perfect and practical in all situations in organizations. Nor is there one way to take 'risk' into account that is theoretically perfect and universally practical. However, there are several good approaches that can be used, ranging from computational to conversational, and it is not hard to see that circumstances should at least influence which are used. (See here for an overview and some practical suggestions.)

Furthermore, the technique for taking 'risk' into account needs to work with the overall approach to taking a decision. For example, if a decision is primarily based on finding ways to stay on budget then asking for Net Present Value calculations using risk adjusted discount rates reflecting the betas of alternative courses of action is not appropriate! In most cases it is too much work, but more importantly the Net Present Value criterion is philosophically incompatible with trying to stay on a fixed budget.

With these fundamental insights in mind it is obvious that crucial steps in any initiative in this area will include the following:

Through following this approach there is an opportunity for many organizations to refresh their management methods, improve their decision making, and get more from their investment in risk management.

In the remainder of this article I will illustrate the above ideas by describing some typical projects (pointing out some common problems), and then go into more detail on project planning and on different types of decision, techniques for decision making, and techniques for dealing with limited knowledge.

But before that, to deliver on the promise of the title of this article, here is a brief explanation of relavant terminology.

. . . . .
There's more
The whole text of this article is freely available to you without registration by just clicking the link below. Please remember that this website exists because people (perhaps including you) express their thanks for its help in practical ways, such as thinking about how to use its ideas, my services, the book, taking part in research, suggesting topics, etc. Thanks for reading this and I hope you enjoy the full article.

Full article

© 2010 Matthew Leitch
New website, new perspective: - Related articles - All articles - The author - Services