{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-130.10","name":"Risk Framework & Appetite","level":2,"parent_id":"BC-130","l1_id":"BC-130","industry":"cross-industry","macro_id":"MC-10","path":["Enterprise Risk","Risk Framework & Appetite"],"description":"Define what the enterprise means by risk, how it is categorized and scored, and how much of each kind the board is prepared to accept, so every assessment uses the same yardstick.","aliases":["Risk Governance","Risk Appetite Statement","Risk Taxonomy"],"in_scope":["Risk policy and governance structure","Risk taxonomy and scoring scales","Risk appetite and tolerance statements"],"out_of_scope":["Board committee operations (see BC-120)"],"csdm_note":null,"status":"active","successor_id":null,"child_ids":["BC-130.10.10","BC-130.10.20","BC-130.10.30"]},"crosswalk":{"realized_by":[],"used_in":[],"patterns":[],"stacks":[],"books":[]},"ancestors":[{"id":"BC-130","name":"Enterprise Risk","level":1}],"children":[{"id":"BC-130.10.10","name":"Risk Policy & Governance","level":3,"child_count":0},{"id":"BC-130.10.20","name":"Risk Taxonomy","level":3,"child_count":0},{"id":"BC-130.10.30","name":"Risk Appetite Definition","level":3,"child_count":0}]}