Risk Appetite Framework Design in Riyadh

A board policy stating a "moderate" appetite for risk gives management nothing to work with when deciding whether to accept a large new customer that would account for a big share of revenue. It also gives no help when deciding whether to expand in a way that doubles one operational exposure. Specific, numeric thresholds make the concept usable instead of a phrase in a governance document that nobody consults.

The thresholds need discussion and agreement from the people accountable if a risk materializes. A document drafted by management and approved in a board meeting, without the board engaging with what the numbers mean in practice, does not achieve that.

Concrete scenarios help the board engage: what if one customer exceeded a given share of revenue, or the exchange rate moved by a given amount? Abstract percentages are hard to picture without a realistic link to company decisions.

Once thresholds exist, they should inform the risk assessments commissioned for major decisions such as a new market entry, a large contract or an acquisition. The assessment team gets a shared benchmark to measure against instead of a fresh subjective judgment each time.

A framework so conservative that it blocks any meaningful growth decision amounts to risk avoidance. Useful thresholds let the business take calculated risk deliberately, instead of either avoiding growth or drifting into risk nobody agreed to accept. Getting the balance right takes open discussion between the board and management.