Project Management

Please login or join to subscribe to this thread

Risk tolerance, risk threshold and risk appetite?

linkedin twitter facebook  
avatar
Wael Haddad Project Manager, Electrical Electronics Communication Engineer,MEP Manager, MCSE| Snafee UAE Contracting LLC Dubai, Dubai, United Arab Emirates
How we can differentiate between, risk tolerance, risk threshold and risk appetite? and how we use them?
As per PMI standard and PMBOK:

Tolerance: The quantified description of acceptable variation for a quality requirement.

Risk Threshold: A measure of the level of risk exposure above which action must be taken to address risks proactively, and below which risks may be accepted.

Risk Appetite: The degree of uncertainty an organisation or individual is willing to accept in anticipation of a reward.

Is there another way to remove the ambiguity and confusion of these jargon
Sort By:
< 1 2 >
avatar
Keith Novak Tukwila, Wa, United States
Risk tolerance is how much risk an organization is willing to accept for individual risks, vs. risk appetite which is how much they are willing to accept for the sum of all risks. It's often subjective because of the uncertainty inherent in risk analysis.

Risk threshold is an actual quantifiable control limit at which point action is taken.
...
1 reply by Wael Haddad
Jun 02, 2020 6:21 PM
Wael Haddad
...
Thanks Keith for your reply, but i would like to share the IRM point of view in this regards with you,

https://www.theirm.org/media/7239/64355_riskapp_a4_web.pdf
avatar
Wael Haddad Project Manager, Electrical Electronics Communication Engineer,MEP Manager, MCSE| Snafee UAE Contracting LLC Dubai, Dubai, United Arab Emirates
AS per Institute Of Risk Management (IRM): Our view is that both risk appetite and risk tolerance are inextricably linked to performance over time. We believe that while risk appetite is about the pursuit of risk, risk tolerance is about what you can allow the organisation to deal with.

Organisations have to take some risks and they have to avoid others. The big question that all organisations have to ask themselves is: just what does successful performance look like? This question might be easier to answer for a listed company than for a government department, but can usefully be asked by boards in all sectors.
avatar
Wael Haddad Project Manager, Electrical Electronics Communication Engineer,MEP Manager, MCSE| Snafee UAE Contracting LLC Dubai, Dubai, United Arab Emirates
Jun 02, 2020 6:06 PM
Replying to Keith Novak
...
Risk tolerance is how much risk an organization is willing to accept for individual risks, vs. risk appetite which is how much they are willing to accept for the sum of all risks. It's often subjective because of the uncertainty inherent in risk analysis.

Risk threshold is an actual quantifiable control limit at which point action is taken.
Thanks Keith for your reply, but i would like to share the IRM point of view in this regards with you,

https://www.theirm.org/media/7239/64355_riskapp_a4_web.pdf
...
1 reply by Keith Novak
Jun 03, 2020 10:17 AM
Keith Novak
...
For the benefit of the readers here, perhaps you can define the terms in your own words, and their important distinctions here. Unfortunately that PDF uses the term appetite 60x over the first 8 pages before attempting to describe the term itself, and the front matter seems geared to executive strategy rather than managing projects.

From an editorial perspective, you lose a lot of readers if they can't quickly tell why the information may be useful to them, as would typically be found in a white paper abstract.
avatar
Sergio Luis Conte Helping to create solutions for everyone| Worldwide based Organizations Buenos Aires, Argentina
Take a look to the PMI´s Lexicon of Project Management Terms. You will find the definitions there.
avatar
Kiron Bondale Retired | Mentor| Retired Welland, Ontario, Canada
Wael -

These are reasonable subjective definitions, but each organization is responsible for translating these into operational, objective definitions.

For example, I've often see organizational risk appetite translated into unambiguous wording to help practitioners understand what they should and shouldn't do.

Kiron
avatar
MANSOUR THABET ALQUBATY System Controller| Teleyemen Sana'A, N/A, Yemen
Thanks for sharing
avatar
Tarun Nair Adoor, Kerala, India
PMI define them as:
Risk Appetite--
The degree of uncertainty an organization or individual is willing to accept in anticipation of a reward.

Risk Threshold--
The measure of acceptable variation around an objective that reflects the risk appetite of the organization and stakeholders.

Risk Tolerance --
The degree of uncertainty that an organization or individual is willing to withstand.
avatar
Keith Novak Tukwila, Wa, United States
Jun 02, 2020 6:21 PM
Replying to Wael Haddad
...
Thanks Keith for your reply, but i would like to share the IRM point of view in this regards with you,

https://www.theirm.org/media/7239/64355_riskapp_a4_web.pdf
For the benefit of the readers here, perhaps you can define the terms in your own words, and their important distinctions here. Unfortunately that PDF uses the term appetite 60x over the first 8 pages before attempting to describe the term itself, and the front matter seems geared to executive strategy rather than managing projects.

From an editorial perspective, you lose a lot of readers if they can't quickly tell why the information may be useful to them, as would typically be found in a white paper abstract.
avatar
Peter Rapin Subject Matter Expect; Project Delivery| Independent Consultant Ontario, Canada
The threshold should be the point at which the cost of mitigation is equal to the value gained due to mitigation. One does not spend $1m in mitigation measures to reduce the risk cost allowance by $0.5m even when this brings the cost allowance within an arbitrarily set tolerance.
avatar
Wael Haddad Project Manager, Electrical Electronics Communication Engineer,MEP Manager, MCSE| Snafee UAE Contracting LLC Dubai, Dubai, United Arab Emirates
Thanks all for your input and valuable contribution in this discussion,

As per Risk Doctor/ David Hillson, Risk Tolerance could mean the “APPETITE” how much we will bear, or it could mean the “THRESHOLD” plus or minus measurement,
So risk “TOLERANCE” is particularly unhelpful term in the risk management because it’s ambiguous, it has two potential meanings, and for that reason Risk Doctor/ David Hillson would recommend that we don’t use it.
what do we mean actually by risk tolerance we think about? when we say tolerance is it how much we’re prepared to bear which is then really risk “APPETITE”, Or do we mean something that we can measure with a plus and minus boundary In which case we mean “THRESHOLD”, and he prefer not use this confusing look phrase at all “TOLERANCE”
...
1 reply by Tarun Nair
Jun 03, 2020 8:04 PM
Tarun Nair
...
I would differ a bit on your define for appetite "how much we will bear".
It would be rather "how much we are willing to bear"
It is possible that we can bear much higher risk, but are not willing to take.
I would agree the second part "it could mean the THRESHOLD plus or minus measurement"

I would also agree that TOLERANCE is not so useful term in particular and would be more meaningful to use appetite and threshold.
I think PMI also has the same view and the defined term is "Risk Tolerance [deprecated]"
< 1 2 >

Please login or join to reply

Content ID:
ADVERTISEMENTS

It is wonderful to be here in the great state of Chicago.

- Dan Quayle

ADVERTISEMENT

Sponsors