Turn a risk appetite statement into numbers: appetite and tolerance thresholds, current utilisation, headroom and worst-case survivability.
Capacity, appetite and tolerance are three different things and get confused constantly: capacity is what you could survive, appetite is what you have chosen to accept, and tolerance is the band above appetite where you escalate instead of panicking. Utilisation compares aggregate annualised loss expectancy with the appetite threshold, while the worst-case figure is checked against capacity separately, because a portfolio inside appetite can still contain one scenario that ends the company. An appetite statement written in adjectives cannot be breached, which is why nothing happens when it is. Quantifying it makes escalation automatic. The output is a management estimate built on your own ALE inputs, not an actuarial figure.
Risk Appetite
Appetite threshold = risk capacity × appetite %; tolerance threshold = appetite × (1 + tolerance %); utilisation = aggregate ALE ÷ appetite threshold.
Appetite threshold = risk capacity × appetite %; tolerance threshold = appetite × (1 + tolerance %); utilisation = aggregate ALE ÷ appetite threshold. Capacity, appetite and tolerance are three different things and get confused constantly: capacity is what you could survive, appetite is what you have chosen to accept, and tolerance is the band above appetite where you escalate instead of panicking. Utilisation compares aggregate annualised loss expectancy with the appetite threshold, while the worst-case figure is checked against capacity separately, because a portfolio inside appetite can still contain one scenario that ends the company.
An appetite statement written in adjectives cannot be breached, which is why nothing happens when it is. Quantifying it makes escalation automatic. The output is a management estimate built on your own ALE inputs, not an actuarial figure.
This calculator takes 6 inputs: Risk capacity — capital available to absorb loss, Risk appetite as a share of capacity, Tolerance band above appetite, Current aggregate annualised loss expectancy, Single worst-case loss scenario, Individual risks currently above the appetite line. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Appetite is the level of risk you are willing to take in pursuit of objectives. Tolerance is the deviation from appetite you will accept before acting — the band where a risk owner escalates rather than the point at which a governance failure has occurred. Setting tolerance at zero makes every fluctuation a breach and trains people to ignore breaches.
Because an average hides tail risk. A portfolio comfortably inside appetite can hold one scenario that exceeds everything you could absorb, and that scenario is a board and insurance conversation regardless of how low its likelihood looks.