Security Magazine logo
search
cart
facebook twitter linkedin youtube
  • Sign In
  • Create Account
  • Sign Out
  • My Account
Security Magazine logo
  • NEWS
    • Security Newswire
    • Technologies & Solutions
  • MANAGEMENT
    • Leadership Management
    • Enterprise Services
    • Security Education & Training
    • Logical Security
    • Security & Business Resilience
    • Profiles in Excellence
  • PHYSICAL
    • Access Management
    • Fire & Life Safety
    • Identity Management
    • Physical Security
    • Video Surveillance
    • Case Studies (Physical)
  • CYBER
    • Cybersecurity News
    • More
  • BLOG
  • COLUMNS
    • Cyber Tactics
    • Leadership & Management
    • Security Talk
    • Career Intelligence
    • Leader to Leader
    • Cybersecurity Education & Training
  • EXCLUSIVES
    • Annual Guarding Report
    • Most Influential People in Security
    • The Security Benchmark Report
    • The Security Leadership Issue
    • Top Guard and Security Officer Companies
    • Top Cybersecurity Leaders
    • Women in Security
  • SECTORS
    • Arenas / Stadiums / Leagues / Entertainment
    • Banking/Finance/Insurance
    • Construction, Real Estate, Property Management
    • Education: K-12
    • Education: University
    • Government: Federal, State and Local
    • Hospitality & Casinos
    • Hospitals & Medical Centers
    • Infrastructure:Electric,Gas & Water
    • Ports: Sea, Land, & Air
    • Retail/Restaurants/Convenience
    • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
    • Industry Events
    • Webinars
    • Solutions by Sector
    • Security 500 Conference
  • MEDIA
    • Videos
      • Cybersecurity & Geopolitical Discussion
      • Ask Me Anything (AMA) Series
    • Podcasts
    • Polls
    • Photo Galleries
  • MORE
    • Call for Entries
    • Classifieds & Job Listings
    • Continuing Education
    • Newsletter
    • Sponsor Insights
    • Store
    • White Papers
  • EMAG
    • eMagazine
    • This Month's Content
    • Advertise
  • SIGN UP!
Leadership & Management

Do You Understand Risk Appetite?

By Marleah Blades
Marleah Blades
May 1, 2012

Risk appetite isn’t a term that comes up a lot in the security trade media. This is interesting, because understanding risk appetite is a crucial factor in developing acceptable security programs, communicating value, and aligning the function with the goals of the business — all of which are talked about in security circles all the time. So what is risk appetite?

“One definition is the limit of how much risk – in an absolute sense – you want to take,” said Gregory Niehaus, professor of Finance and Insurance at the University of South Carolina’s Darla Moore School of Business, during last month’s Next Generation Security Leader development program session. “An alternative view, one that I prefer, recognizes that you engage in risky activity because of the good results. We take risk because we expect a return.”

Companies prefer to have high return with low risk, said Niehaus, but it rarely works that way. “There is typically a tradeoff. If you want a higher return, you need higher risk. So risk appetite is our willingness to trade off risks for expected return.”

Niehaus shared three factors that tend to influence an organization’s risk appetite:

1) The risk appetite of its leadership. “There is evidence that the risk appetite of business leaders depends in part on their own experiences,” he said. “For example, CEO s who have gone through a bankruptcy in another organization may expend more on risk management. Their risk appetite may also be influenced by their executive incentives package. Stock options encourage greater risk taking.”

2) The organizational culture. The Security Executive Council has observed that corporate cultures come in a variety of flavors. Some common cultural styles are the All About the People culture (common in creative companies that prefer not to limit the freedom of employees), the Analytical/Logical culture, the Utilitarian culture (“Just get the work done”), and the Parental culture. The culture of the organization has a strong impact both on how the organization views and interacts with security, and on the risk/return tradeoff the company is likely to pursue.

3) The financial and economic focus on the firm and market characteristics. “Research indicates risk appetite is influenced by how close a firm is to financial distress, the importance of reputation to the firm, its ability to access capital markets, and investment opportunities,” said Niehaus.

Understanding risk appetite in general, and the risk appetite of your organization specifically, is helpful in developing strategy and forecasting organizational support for security initiatives. But more than that, it’s critical to building security’s credibility and influence within the business, said Tim Janes, CSO and Managing Vice President for Capital One. “If companies don’t take risks, they don’t stay in business,” he said. “Businesses understand the principles related to risk appetite. The problem is, many of them don’t think their security leaders do. If you don’t understand these concepts or demonstrate that you understand them, they don’t look at you as a partner in the business. They don’t see the value there.”

Janes remarked on the perception so many business have of security as the department of “no,” the department whose job appears to be blocking the rest of the company from taking advantage of opportunities or conducting better business. “Changing that mindset means gaining an understanding of risk appetite so you can speak to it,” he said. “Our mantra is now ‘We start at yes and work backwards from there’ – it’s a phrase I heard Jim Hutton at Procter & Gamble use, and it’s been very successful here. The businesses understand they can bring us to the table because we will help them find the right solutions and inform their risk appetite, but we’re not just going to say no.”

Risk belongs to the business, not to security. The business decides what risk it is willing to take in order to gain the returns it desires. The security leader’s role is to make sure businesses are fully educated on the risks they face and to help them to figure out ways to manage or reduce risks outside their appetite.  

KEYWORDS: risk appetite security risk management

Share This Story

Looking for a reprint of this article?
From high-res PDFs to custom plaques, order your copy today!

Marleah Blades is senior editor for the Security Executive Council, an innovative problem-solving research and services organization. The Council works with Tier 1 Security Leaders™ to reduce risk and add to corporate profitability in the process. To learn about becoming involved, e-mail contact@secleader.com or visit www.securityexecutivecouncil.com/sm. You can also follow the Council on Facebook and Twitter.

Recommended Content

JOIN TODAY
To unlock your recommendations.

Already have an account? Sign In

  • Security's Top Cybersecurity Leaders 2024

    Security's Top Cybersecurity Leaders 2024

    Security magazine's Top Cybersecurity Leaders 2024 award...
    Cybersecurity
    By: Security Staff
  • cyber brain

    The intersection of cybersecurity and artificial intelligence

    Artificial intelligence (AI) is a valuable cybersecurity...
    Logical Security
    By: Pam Nigro
  • artificial intelligence AI graphic

    Assessing the pros and cons of AI for cybersecurity

    Artificial intelligence (AI) has significant implications...
    New Security Technology
    By: Charles Denyer
Subscribe For Free!
  • Security eNewsletter & Other eNews Alerts
  • eMagazine Subscriptions
  • Manage My Preferences
  • Online Registration
  • Mobile App
  • Subscription Customer Service

More Videos

Sponsored Content

Sponsored Content is a special paid section where industry companies provide high quality, objective, non-commercial content around topics of interest to the Security audience. All Sponsored Content is supplied by the advertising company and any opinions expressed in this article are those of the author and not necessarily reflect the views of Security or its parent company, BNP Media. Interested in participating in our Sponsored Content section? Contact your local rep!

close
  • Crisis Response Team
    Sponsored byEverbridge

    Automate or Fall Behind – Crisis Response at the Speed of Risk

  • Perimeter security
    Sponsored byAMAROK

    Why Property Security is the New Competitive Advantage

  • Duty of Care
    Sponsored byAMAROK

    Integrating Technology and Physical Security to Advance Duty of Care

Popular Stories

Pills spilled

More than 20,000 sensitive medical records exposed

Laptop in darkness

Verizon 2025 Data Breach Investigations Report shows rise in cyberattacks

Coding on screen

Research reveals mass scanning and exploitation campaigns

White post office truck

Department of Labor Sues USPS Over Texas Whistleblower Termination

Computer with binary code hovering nearby

Cyberattacks Targeting US Increased by 136%

2025 Security Benchmark banner

Events

May 22, 2025

Proactive Crisis Communication

Crisis doesn't wait for the right time - it strikes when least expected. Is your team prepared to communicate clearly and effectively when it matters most?

September 29, 2025

Global Security Exchange (GSX)

 

View All Submit An Event

Products

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

See More Products

Related Articles

  • Global competition chart

    How Business and Risk Drivers Impact Mitigation Strategy

    See More
  • Buildings in Canada

    Securing Cities: Can We Do It Better?

    See More
  • Marleah Blades

    Risk at High Velocity

    See More

Related Products

See More Products
  • 150 things.jpg

    Physical Security: 150 Things You Should Know 2nd Edition

  • CPTED.jpg

    CPTED and Traditional Security Countermeasures: 150 Things You Should Know

  • Risk-Analysis.gif

    Risk Analysis and the Security Survey, 4th Edition

See More Products
×

Sign-up to receive top management & result-driven techniques in the industry.

Join over 20,000+ industry leaders who receive our premium content.

SIGN UP TODAY!
  • RESOURCES
    • Advertise
    • Contact Us
    • Store
    • Want More
  • SIGN UP TODAY
    • Create Account
    • eMagazine
    • eNewsletter
    • Customer Service
    • Manage Preferences
  • SERVICES
    • Marketing Services
    • Reprints
    • Market Research
    • List Rental
    • Survey/Respondent Access
  • STAY CONNECTED
    • LinkedIn
    • Facebook
    • YouTube
    • X (Twitter)
  • PRIVACY
    • PRIVACY POLICY
    • TERMS & CONDITIONS
    • DO NOT SELL MY PERSONAL INFORMATION
    • PRIVACY REQUEST
    • ACCESSIBILITY

Copyright ©2025. All Rights Reserved BNP Media.

Design, CMS, Hosting & Web Development :: ePublishing