Distinguish risk capacity, risk appetite and risk tolerance and apply the distinction to a real balance sheet.
Finance & Banking
Designing Risk Appetite Statements and Cascading Risk Limits in Banks
Learn to design a risk appetite statement, set key risk indicators and thresholds, and cascade board-level limits into business lines without breaching aggregate appetite.
🗓️Duration5 training days
📚Content4 modules · 8 sessions
🎓On completionAccredited attendance certificate
About the programme
Course Overview
A risk appetite statement that sits in a policy document without reaching the desks where risk is actually taken protects no one. This course builds a risk appetite framework that works in practice, starting with the distinction between risk capacity, risk appetite and risk tolerance, and structuring a statement where qualitative positions on each risk category link directly to measurable metrics. Participants select key risk indicators that are genuinely predictive rather than merely convenient, set thresholds using stress testing and peer evidence, and then do the harder work of cascading board-level appetite into limits for business lines, portfolios and individual desks without the sum of those limits quietly exceeding what the board approved. A dedicated module links risk appetite to strategic planning and stress testing, so a business plan is tested against approved boundaries before it is adopted rather than after a breach. The final modules cover monitoring and escalation protocols that convert a threshold breach into a tracked action, and the three lines of defence responsibilities for operating within, challenging and independently assuring the framework, closing with how to review and refresh the statement as the bank's risk profile changes.
Expected Learning Outcomes
Structure a risk appetite statement that links qualitative statements to quantitative metrics by risk category.
Select key risk indicators and set threshold levels supported by data and stress testing evidence.
Cascade board-approved appetite into business line and desk-level limits without exceeding aggregate appetite.
Link risk appetite to strategic planning and stress testing so plans are tested against approved boundaries.
Design monitoring and escalation protocols that turn a limit breach into a tracked management action.
Define three lines of defence responsibilities for operating, challenging and assuring the risk appetite framework.
Who Should Attend
Risk management staff responsible for drafting or maintaining the risk appetite statement.
Business line heads who must operate within cascaded risk limits.
Board and risk committee members who approve and challenge the risk appetite framework.
Strategy and planning staff who must align business plans with approved risk appetite.
Internal audit staff assessing whether the risk appetite framework operates as designed.
Compliance and second-line staff monitoring adherence to cascaded limits.
Course Modules
Select any module to see its sessions and points.
01Foundations of the Risk Appetite Framework
2 sessions · 8 points
Session 1Distinguishing Risk Capacity, Appetite and Tolerance
- Distinguish risk capacity, risk appetite and risk tolerance as three related but separate concepts.
- Assess the bank's risk capacity based on capital, liquidity and earnings capacity constraints.
- Define the boundary between acceptable risk-taking and risk that would breach stakeholder expectations.
- Identify the risk categories, such as credit, market, liquidity and operational risk, needing separate statements.
Session 2Structuring the Risk Appetite Statement by Risk Category
- Draft qualitative appetite statements that describe the bank's stance toward each material risk category.
- Structure the risk appetite statement so qualitative statements link directly to supporting quantitative metrics.
- Align the risk appetite statement's structure with the bank's existing risk taxonomy and governance framework.
- Review peer and supervisory expectations to benchmark the comprehensiveness of the draft statement.
02Setting Quantitative Metrics and Limits
2 sessions · 8 points
Session 1Selecting Key Risk Indicators and Setting Thresholds
- Select key risk indicators that are measurable, timely and genuinely predictive of the risk being monitored.
- Set threshold levels for each indicator using historical data, stress testing results and peer benchmarking.
- Define a status scale that translates indicator readings into a clear management signal.
- Avoid selecting indicators that duplicate each other or fail to move under realistic stress conditions.
Session 2Cascading Board-Level Appetite into Business Line Limits
- Cascade board-approved appetite metrics into limits for business lines, portfolios and individual desks.
- Ensure the sum of cascaded limits does not exceed the board-approved aggregate appetite for each risk category.
- Assign limit ownership and monitoring responsibility at each level of the cascade.
- Reconcile business-as-usual limit structures with the risk appetite cascade to remove inconsistencies.
03Embedding Risk Appetite into Decision-Making
2 sessions · 8 points
Session 1Linking Risk Appetite to Strategy, Planning and Stress Testing
- Test whether the strategic plan and budget remain within the boundaries set by the risk appetite statement.
- Use stress testing results to validate whether appetite thresholds hold under adverse scenarios.
- Adjust business planning assumptions when stress testing reveals the plan would breach risk appetite.
- Present the linkage between strategy, risk appetite and stress testing to the board for approval.
Session 2Monitoring, Breach Escalation and Management Action
- Design a monitoring process that reports key risk indicator status against thresholds on a regular cycle.
- Define escalation protocols specifying who is notified and what action is required at each breach level.
- Distinguish a limit breach requiring immediate action from an early warning requiring closer monitoring.
- Track remediation actions following a breach through to confirmed resolution.
04Governance and Risk Culture
2 sessions · 8 points
Session 1Roles Across the Three Lines of Defence
- Define the first line's role in operating within limits and escalating emerging risk issues.
- Define the second line's role in setting standards, challenging first-line risk-taking and independent monitoring.
- Define the third line's role in providing independent assurance over the risk appetite framework's operation.
- Assess where responsibilities across the three lines overlap or leave gaps in practice.
Session 2Reviewing, Challenging and Refreshing the Statement
- Conduct an annual review of the risk appetite statement against actual risk-taking and business developments.
- Facilitate a board and executive challenge session on proposed changes to appetite metrics or thresholds.
- Assess whether the current risk culture supports adherence to the stated risk appetite in practice.
- Refresh the risk appetite statement and communicate changes to all levels of the cascade.
What the participant receives
4 course modules
A structured syllabus
8 training sessions
across 5 days
32 detailed points
Applied, detailed content
Accredited attendance certificate
On completing the programme
Complete your registration
We will contact you within one business day to confirm.
Ready to start?
Reserve your seat and start building the skill.