Risk appetite is the level of risk that an organization is prepared to accept in pursuit of its objectives, before action is deemed necessary to mitigate the risk.