GCRI · Systemic Risk Management
Risk governance and appetite
Risk governance decides who owns each risk, how much of it an institution is willing to carry, and how that position is challenged and reported. Appetite statements and tolerances only matter if they shape decisions on strategy, investment and operations. This page sets out how governance arrangements work, where they fail for interconnected risks, and what evidence boards, ministers and supervisors need to set and review an appetite they can defend.
Risk governance and appetite in seven parts.
- 01The questionRisk governance and appetite: how the risk develops
- 02Across the domainsRisk appetite set in one sector constrains the others
- 03IndicatorsWhat is measured, and how well
- 04SourcesWhere the evidence comes from
- 05DecisionsWho decides, and what the evidence serves
- 06Core questionsWhat governance experts ask
- 07MechanismsWhy governance fails
Risk governance and appetite: how the risk develops.
Authority, objectives and acceptable exposure. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
Ownership fragments across silos
Risks that cross departments, sectors or jurisdictions often have no single owner. Each unit manages its share, and the combined exposure, which sits between them, is reported by nobody.
Appetite is set without measures
An appetite statement written in qualitative terms cannot be checked against exposure. Without tolerances tied to indicators, breaches are noticed late or argued away.
Short horizons crowd out slow risks
Reporting cycles reward attention to near-term, familiar risks. Slow-building and low-frequency risks, such as dependency concentration or climate exposure, receive less scrutiny until they materialise.
Challenge weakens over time
Independent risk functions and non-executive members lose influence when information is filtered, incentives align with growth, or dissent is costly. Governance then confirms decisions rather than testing them.
Risk register.
The screen a team would use to follow this subject: its measures, states and decisions. Names are examples and values are illustrative.
Risk register
Risk governance and appetite · Enterprise A · Review cycle Q1
Residual risk
likelihood × impact, risks per cell
Counts of risks per cell. Shading follows the appetite bands.
Above appetite
| Supplier concentration | Procurement | High | ▲ 1 |
| Data centre flooding | Operations | High | ▼ 0 |
| Model error in pricing | Finance | Medium | ▲ 0 |
| Key staff loss | People | Medium | ▼ 1 |
Risk management process, after the international standard
- Scope, context, criteriaset
- Identifytaxonomy
- Analyselikelihood · impact
- Evaluatevs appetite
- Treatplans
- Monitor and reviewKRIs
- Record and reportboard
Treatment actions
- T-11Dual-source critical componentOwner: procurement · overdue14 d late
- T-14Move backup site above flood levelOwner: operationsdue 18 d
- T-17Independent model validationOwner: financedue 15 d
Risk appetite set in one sector constrains the others.
- WaterCouplingUtility boards set service reliability targets that fix how much drought and outage risk customers carry.What to watchStated levels of service for supply interruptions
- EnergyCouplingReserve margins and stockholding obligations express a government’s appetite for supply risk.What to watchReserve margin policy and stock cover
- HealthCouplingSurge capacity decisions set how much shock a health system can absorb.What to watchFunded surge beds and staff
Governance findings are designed for the Global Systems Risk and Resilience series. Risk appetite statements are decisions of boards and governments; the page describes how they are made and documented, following ISO 31000 and COSO, and sets none.
- Published risk appetite statements from public bodies, with dates.
- Cases where an appetite set in one sector moved risk to another.
Stocks, flows, delays and a tipping threshold.
Two stocks, pressure and adaptive capacity, joined by a reinforcing growth loop, a delayed balancing response and damage when pressure outruns capacity; past the threshold the system can tip. Teaching model with stated illustrative values, not a prediction.
Controls
- Growth of pressure
- 6.0% a year
- Efficacy of capacity in reducing pressure
- 4.0% a year
- Investment response to perceived pressure
- 20%
- Perception delay
- 4.0 years
- Tipping threshold of pressure
- 60 index
- Amplification past the threshold
- 2.0 times
- Years simulated
- 50 years
Readouts
- Peak pressure
- 113 index
- Capacity at the end
- 186 index
- Years over the threshold
- 15.8 years
Numbers, methods and sources
| Year | Pressure | Capacity | Perceived |
|---|---|---|---|
| 0 | 20.0 | 50.0 | 20.0 |
| 4 | 23.3 | 44.9 | 21.2 |
| 8 | 27.2 | 42.2 | 24.0 |
| 12 | 31.7 | 42.3 | 27.7 |
| 16 | 36.8 | 45.5 | 32.2 |
| 20 | 42.3 | 51.5 | 37.2 |
| 24 | 47.9 | 60.3 | 42.6 |
| 28 | 53.2 | 71.3 | 48.0 |
| 32 | 57.8 | 84.3 | 53.1 |
| 36 | 66.4 | 98.4 | 58.4 |
| 40 | 82.7 | 115.9 | 69.7 |
| 44 | 97.8 | 139.7 | 83.8 |
| 48 | 109.1 | 169.4 | 97.3 |
Methods
- System dynamics Forrester (1961), Industrial Dynamics, MIT Press; Sterman (2000), Business Dynamics
- Critical transitions and tipping points Scheffer and others (2009), Early-warning signals for critical transitions, Nature 461
- Causal loop diagram Sterman (2000), Business Dynamics, McGraw-Hill
- Uncertainty fan (parameter Monte Carlo) Spiegelhalter, Pearson and Short (2011), Visualising uncertainty about the future, Science 333
- One-at-a-time sensitivity (tornado) Saltelli and others (2008), Global Sensitivity Analysis: The Primer, Wiley
Data
No observed data enters this model: it runs on the teaching values set by the controls, to be replaced with a programme’s own evidence.
Across the six pillars, led by Nexus Consortium
- Experiments Labs
- Built in Systemic Risk Management in Foundry
- Tested at Systemic Risk Management in Universe
- Codified in Systemic Risks in Standards
- Published in Systemic Risk Management in Reports
- Taught in Faculty of Risk Science and Methods in Academy
What is measured, and how well.
Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.
| Indicator | Unit | Cadence | Source type | Label |
|---|---|---|---|---|
| Risks with a named owner | percent of register entries | quarterly | Risk register | REPORTED |
| Exposure against tolerance | ratio of measured exposure to stated tolerance | per reporting cycle | Risk reporting to the board or cabinet | REPORTED |
| Tolerance breaches escalated on time | percent of breaches escalated within the defined period | quarterly | Escalation logs | REPORTED |
| Cross-cutting risks with joint ownership | count of risks with a cross-unit owner | annual | Risk governance charters | DECLARED |
| Board time on principal risks | share of agenda time | annual | Board minutes and committee records | REPORTED |
| Open audit findings on risk governance | count by age band | quarterly | Internal audit tracking | REPORTED |
How risk governance and appetite is modelled, measured and tested.
The model, its assumptions, its data and its uncertainty, in the form a scientist or engineer would check. Structures follow published methods. The values drawn are illustrative, not findings.
Model, equations and assumptions
The model structure used for risk governance and appetite, the assumptions it makes and how each is tested.
Ri = f(Hi, Ei, Vi, Ci)hazard, exposure, vulnerability and coping capacityEAL = ∑k pk · Lkover events k with annual probability pkxt+1 = A xt + B ut + εtA carries the couplings, u the shock, ε the error| Assumption | Why it is made | How it is tested |
|---|---|---|
| Hazard and exposure are independent within an event | Keeps the loss integral tractable | Compare with a copula fit on joint records |
| Couplings are linear near the operating point | Lets shocks propagate through A | Perturb beyond the linear range and compare |
| Vulnerability curves transfer between places | Local curves are rarely available | Validate against observed losses where they exist |
- Inputs
- versioned datasets with provenance
- Outputs
- distributions, never single numbers
- Code
- released with the model card and tests
- Reproduction
- same data, code, environment and seed
Where the evidence comes from.
Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.
| Source | What it gives | Licence class |
|---|---|---|
| ISO 31000 and its handbook | Principles and framework language for governance, roles and integration | Licensed standard, purchase required |
| COSO Enterprise Risk Management framework | Components and principles on governance, culture and appetite | Licensed publication, purchase required |
| OECD Recommendation on the Governance of Critical Risks and its implementation reports | Country practice on national risk governance and coordination | Public, OECD terms of use |
| Published annual reports and principal risk disclosures | How organisations describe their risks, appetite and governance | Public records, terms per publisher |
| National audit office reports on risk management in government | Independent findings on how public bodies govern risk | Public records, licence per office (to check) |
Who decides, and what the evidence serves.
Systemic Risk Management prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Who decides | The question | Evidence this page serves |
|---|---|---|
| Boards and risk committees | What level of each principal risk the organisation accepts, and when a breach triggers action | Appetite templates; exposure against tolerance; ownership gaps |
| Cabinet offices and centres of government | Who coordinates national risks that cross ministries | Ownership maps of cross-cutting risks; peer country governance practice |
| Supervisors and regulators | Whether a regulated entity’s risk governance is adequate for its exposures | Governance reviews against named principles; escalation records |
| Internal audit functions | Which risk governance processes to examine next | Open findings; areas with weak ownership or untested tolerances |
Outputs this topic produces
- Risk ownership maps that show cross-cutting exposures and their gaps
- Appetite and tolerance templates linked to measurable indicators
- Governance reviews framed against ISO 31000 and COSO principles
- Briefing notes for boards and cabinet committees on systemic exposures
What governance experts ask.
- Who has authority to accept a given risk, and is that authority clear before a crisis rather than improvised during one?
- Is the stated risk appetite connected to real limits, budgets and decisions, or is it a statement no one uses?
- How are risks that the organisation shares with others, or imposes on others, reflected in its appetite?
- How does the board or council learn when exposure is drifting beyond what it agreed?
Why governance fails.
Post-event reviews of major failures repeatedly find that warning signs existed inside the organisation. The failure was not a lack of information but of authority, incentives and channels that would have carried that information to someone able and willing to act.
Diffuse ownership
Risks that cross departments or organisations have no single owner, so no one is accountable when they materialise.
Short horizons
Rewards for near-term performance can favour risks whose costs arrive later or fall on others.
Filtered reporting
Bad news is softened as it moves upward, so leaders see a calmer picture than staff do.
How governance and appetite are designed and tested.
- 01
Appetite frameworks
Statements of appetite translated into tolerances and limits for specific risk types. They work best where risks can be measured and worst for novel or shared risks.
- 02
Lines of defence
Separation of risk-taking, risk oversight and independent assurance. The model clarifies roles but can encourage box-ticking if not used thoughtfully.
- 03
Decision analysis
Decision analysis under uncertainty makes trade-offs and values explicit. It depends on honest elicitation of preferences.
- 04
Governance reviews
Post-event and periodic reviews test whether governance worked as designed. They are only as useful as the willingness to act on them.
How it is studied, and what the methods cannot say.
- 01Decision analysis under uncertaintyMulti-criteria treatment choice · Decision trees for contingent plansApplied here
- 02Uncertainty quantification and model validationPropagating input uncertainty · Separating kinds of uncertainty · Deep uncertainty framingApplied here
- 03Probability and statisticsFrequency and severity modelling · Dependence between risks · Combining data and judgementApplied here
Where this page’s references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Questions and answers.
What is risk appetite?
How is risk tolerance different from appetite?
Who should own a systemic risk?
Is a risk appetite statement required?
Can an organisation have appetite for systemic risk?
Does the platform review organisations’ governance?
Contribute evidence from this page.
Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GCRISend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGCRISee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring a method, a dataset or a question.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.