An appetite statement with no number in it cannot be violated. This workbook builds the chain that makes appetite real: statements with residual ceilings, KRIs with thresholds, and a breach response someone is accountable for.
Most appetite statements are slogans, a page of adjectives approved by the board that no metric could ever violate. This workbook forces each domain's statement down the chain: a qualitative position, a quantitative tolerance, a residual-risk ceiling on the same 1–25 scale your register uses, and KRIs whose thresholds trip a named person's response. When a number crosses a line the board drew, the workbook says so, in red, automatically.
All seven risk domains pre-filled with strong example statements, appetite levels, tolerances, and ceilings, adapt them, then defend them.
200 rows with 12 worked examples of measurable KRIs (patch SLA %, overdue reassessments, aged issues) each with thresholds, direction, and a breach response.
RED and AMBER counts, % green, the domain × status grid, stale indicators, and the over-appetite list, board-ready, zero manual entry.
Appetite-level definitions, threshold-setting guidance, direction logic, and staleness rules, calibrated once, applied consistently.
How the framework supports COSO ERM, ISO 31000, NIST CSF 2.0 governance outcomes, DORA's risk-tolerance requirement, and FFIEC expectations.
The five-step walkthrough and every column defined with sources.
The thinking: Your Risk Appetite Statement Is a Slogan Until It Has Thresholds.
A single Microsoft Excel workbook (.xlsx). No macros; recalculates on open; also opens in Google Sheets and LibreOffice.
Yes, deliberately. The ceilings use the same 1–25 residual scale and the same seven domains as the Risk Register and Integrated Register, so "current max residual per domain" is a direct read from either.
Yes, internally or in client engagements. You can't resell the template itself as a template.
If you want appetite workshops facilitated or the framework adapted to your regulator, get in touch.
Ceilings, thresholds, and responses someone owns, instead of a page of adjectives.