If risk management is to be meaningful, it needs to deliver actionable information to help people make informed and intelligent decisions. What is risk appetite? COSO defines it as the “amount of risk ...