What is Risk Capacity?
The objective amount of loss an enterprise can tolerate without its continued existence being called into question.
What is Risk Appetite?
The amount of risk on a broad level, that an entity is willing to accept in pursuit of its mission.
What is Risk Acceptance?
Should not exceed the risk appetite for the organization, and cannot exceed the risk capacity.
What is Risk Tolerance?
Any deviation from the risk appetite that is not desirable but is known to be sufficiently below the risk capacity that acceptance of risk is still possible when there is a compelling business need and other options are too costly.