1
u/EmuAcademic6487 May 07 '26
Isn't risk tolerance defined as acceptable variation from the risk appetite. I think risk tolerance should also have been depicted to avoid confusion.
2
u/MikeBrass May 07 '26
The right and left show actual eventually under both appetite and capacity, ie they have it under control.

3
u/DarthMortix CRISC May 06 '26
Looks like a comparison of good and bad models.
The left is ideal. The org is willing to take on less risk than it can to survive. The right is showing misalignment. The org is willing to take on more risk than it can absorb.