This Handbook presents a proactive and flexible framework to develop a measurable Cybersecurity Risk Appetite. Moving beyond traditional financial limits, it aligns risk appetite and tolerance with broader business objectives and enterprise risks — strategic, operational, reputational, compliance, and financial.
This guide is developed for Risk Executives across industries to develop meaningful Cyber Risk Appetite statements using both qualitative and quantitative metrics that guide decision-making and resource allocation.
Robert Rodriguez
Chairman, SINET
Venture Partner, SYN Ventures
Brandon Pinzon
Former CSO
Argo Group
Kirsten Davies
Former CISO
Unilever
Brian Fricke
CISO
City National Bank of Florida