An appetite statement with no number in it cannot be violated. This workbook builds the chain that makes appetite real: statements with residual ceilings, KRIs with thresholds, and a breach response someone is accountable for.
Most appetite statements are slogans — a page of adjectives approved by the board that no metric could ever violate. This workbook forces each domain's statement down the chain: a qualitative position, a quantitative tolerance, a residual-risk ceiling on the same 1–25 scale your register uses, and KRIs whose thresholds trip a named person's response. When a number crosses a line the board drew, the workbook says so — in red, automatically.
All seven risk domains pre-filled with strong example statements, appetite levels, tolerances, and ceilings — adapt them, then defend them.
200 rows with 12 worked examples of measurable KRIs — patch SLA %, overdue reassessments, aged issues — each with thresholds, direction, and a breach response.
RED and AMBER counts, % green, the domain × status grid, stale indicators, and the over-appetite list — board-ready, zero manual entry.
Appetite-level definitions, threshold-setting guidance, direction logic, and staleness rules — calibrated once, applied consistently.
How the framework supports COSO ERM, ISO 31000, NIST CSF 2.0 governance outcomes, DORA's risk-tolerance requirement, and FFIEC expectations.
The five-step walkthrough and every column defined with sources.
The thinking: Your Risk Appetite Statement Is a Slogan Until It Has Thresholds.
A single Microsoft Excel workbook (.xlsx). No macros; recalculates on open; also opens in Google Sheets and LibreOffice.
Yes — deliberately. The ceilings use the same 1–25 residual scale and the same seven domains as the Risk Register and Integrated Register, so "current max residual per domain" is a direct read from either.
Yes — internally or in client engagements. You can't resell the template itself as a template.
If you want appetite workshops facilitated or the framework adapted to your regulator, get in touch.
Ceilings, thresholds, and responses someone owns — instead of a page of adjectives.