A measure of an organization’s willingness to take on risks in pursuit of its objectives. It’s the level of risk the organization is willing to accept to achieve its goals. It’s often expressed as a combination of financial, operational, and reputation risk that the organization is willing to accept.