This Handbook presents a proactive and flexible framework to develop a measurable Cybersecurity Risk Appetite. Moving beyond traditional financial limits, it aligns risk appetite and tolerance with broader business objectives and enterprise risks — strategic, operational, reputational, compliance, and financial.
This guide is developed for Risk Executives across industries to develop meaningful Cyber Risk Appetite statements using both qualitative and quantitative metrics that guide decision-making and resource allocation.

Robert Rodriguez
Chairman, SINET
Venture Partner, SYN Ventures

Brandon Pinzon
Former CSO
Argo Group

Kirsten Davies
Former CISO
Unilever

Brian Fricke
CISO
City National Bank of Florida