I will review or develop your risk appetite statement
About this Gig
Essential Review: Review of an existing risk appetite statement and practical observations to improve clarity, structure and usability. Includes a concise written summary of key observations and priority recommendations.
Professional Assessment: Detailed review or development of a risk appetite statement for a key risk category. Includes suggested appetite wording, appetite levels, boundaries/tolerances, governance considerations and practical recommendations.
Strategic Advisory: Advisory support including a tailored risk appetite statement, appetite framework, example metrics/KRIs, governance and reporting considerations, implementation roadmap and Microsoft Teams consultation.
Please note: the images shown are illustrative examples of the type of outputs available across the packages. The Essential Review provides a concise review with key observations and recommendations. The Professional Assessment and Strategic Advisory packages include more detailed analysis, tailored wording, framework development and practical implementation guidance.
If your requirements extend beyond the scope of this gig, I also provide wider advisory and coaching services for enterprise risk.
Business type:
Corporates
•
Nonprofit organizations
Service type:
General risk assessment
•
Other
FAQ
What is a risk appetite statement?
A risk appetite statement defines the amount and type of risk an organisation is willing to take in pursuit of its objectives. It supports decision-making, prioritisation, escalation, governance, and reporting.
What is included in this gig?
Depending on the package selected, this may include review or development of risk appetite wording, risk categories, appetite levels, boundaries, tolerances, example metrics, governance considerations and practical implementation recommendations.
Do I need to already have a risk appetite statement?
No. If you already have a risk appetite statement, I can review and improve it. If you do not have one, the Professional or Strategic packages can help develop a practical draft based on the information you provide.
What is the difference between risk appetite and risk tolerance?
Risk appetite describes the broad level and type of risk an organisation is willing to take. Risk tolerance is usually more specific and may define limits, thresholds or boundaries that indicate when risk exposure is outside the desired range.
Can you create appetite levels for different risk categories?
Yes. Depending on the package selected, I can help define appetite levels for categories such as strategic, financial, operational, compliance, cyber, people, reputational, third-party or project risk.
Can you include metrics, KRIs or tolerances?
Yes, particularly in the Professional and Strategic packages. These can help make risk appetite more practical by linking statements to indicators, thresholds, escalation triggers or reporting measures.
Will this be suitable for Board approval?
The output can support Board or Executive discussion, particularly under the Professional and Strategic packages. However, final approval should remain with your organisation’s appropriate governance body.
Can this be tailored to my sector?
Yes. The risk appetite statement will be tailored based on the information you provide about your organisation, sector, objectives, governance, risk profile and operating environment.
Will you implement risk appetite across the organisation?
This gig can provide practical implementation guidance, particularly under the Strategic Advisory package. A full implementation programme, Board workshop, or organisation-wide rollout would need to be agreed separately.
Is this legal, regulatory or financial advice?
No. This service provides practical risk management and governance support. It does not constitute legal, regulatory, investment or financial advice.

