Skip to main content
COMPEL Body of Knowledge

COMPEL Glossary / GL-15

Risk Appetite Statement

A formally approved document that defines the types and levels of AI-related risk the organization is willing to accept in pursuit of its AI ambition, covering operational, reputational, regulatory, and ethical risk dimensions.

What this means in practice

It provides the decision boundary that governs which use cases can proceed, which require additional controls, and which are out of scope entirely.

Context in the COMPEL framework

Produced in the Calibrate stage and referenced at every subsequent gate review. Without an explicit risk appetite, risk decisions default to individual judgment rather than organizational policy.

Where you see this

Risk Appetite Statement is most commonly referenced when teams work across the Calibrate , Model and Evaluate stages — especially within the Operational Readiness layer . It appears in governance artifacts, assessment instruments, and delivery playbooks wherever COMPEL is operationalized.

Related COMPEL stages

Related domains

Synonyms

risk tolerance statement , AI risk policy , risk acceptance criteria , AI risk appetite , risk appetite and tolerance statement

Related Terms Network

This diagram shows how Risk Appetite Statement connects to other concepts in the COMPEL body of knowledge. Each linked node is a term you can explore in turn.

Related terms for Risk Appetite Statement Network graph showing 3 related glossary terms connected to Risk Appetite Statement. Risk Appetite … AI Ambitio… Risk Asses… Control Re…
3 related concepts connected to Risk Appetite Statement.
Accessible list of related terms
  • AI Ambition Statement — A concise, board-level declaration that defines the organization's strategic intent for AI transformation — what it aims to achieve, at what pace, and with what risk appetite.
  • Risk Assessment Report — A structured, evidence-based evaluation of the risks associated with each AI system or use case — covering technical, operational, ethical, regulatory, and reputational risk dimensions — with scored likelihood and impact ratings, existing control effectiveness ratings, and residual risk determinations.
  • Control Requirements Matrix — A comprehensive mapping of every governance control required for each AI system — specifying the control type (preventive, detective, corrective), the risk or policy it addresses, the evidence required to prove effectiveness, the owner, and the testing frequency.

See also

  • AI Ambition Statement — A concise, board-level declaration that defines the organization's strategic intent for AI transformation — what it aims to achieve, at what pace, and with what risk appetite.
  • Risk Assessment Report — A structured, evidence-based evaluation of the risks associated with each AI system or use case — covering technical, operational, ethical, regulatory, and reputational risk dimensions — with scored likelihood and impact ratings, existing control effectiveness ratings, and residual risk determinations.
  • Control Requirements Matrix — A comprehensive mapping of every governance control required for each AI system — specifying the control type (preventive, detective, corrective), the risk or policy it addresses, the evidence required to prove effectiveness, the owner, and the testing frequency.

Related Terms

Other glossary terms mentioned in this entry's definition and context.