2025 Determining Organization Risk Appetite Whitepaper (INVITATION ONLY)

Description of opportunity or charge of the working group

Subject matter expert (SME) volunteers will review a white paper on determining risk appetite for an organization. The whitepaper abstract follows: 

• The Dynamic Risk Appetite Model (DRAM) is a model that provides predetermined decision guiderails to bridge the gap between analyzing risk scenarios and selecting risk treatment actions. The DRAM subsequently provides decision makers a framework for making risk informed decisions that are directionally aligned with enterprise risk strategy and posture and determined by executive leadership agreement. Operationalizing the DRAM subsequently provides the pieces to develop a strong and transparent top-down risk culture. The DRAM uses Annualized Loss Exposure (ALE), the output of a FAIR analysis as the criteria for setting decision thresholds (that also are monetary). This allows the DRAM to apply to individual risk assessment treatment actions but also allows aggregation of numerous risk scenarios to get a more wholistic enterprise view of the current state of risk.

Anticipated outcomes:

Volunteers will review a white paper about risk appetite. Areas for focus include accuracy, relevance, and completeness. Reviewers are expected to ensure the paper contains valuable, practical content for those who read the paper.

Volunteer benefits: 

• Up to 5 CPE credits (max. 20 annually) in the area of Contributions to the Profession upon successful completion of the term.

All volunteers must have an ISACA Participation Agreement on file.  To see if your agreement is active, visit your volunteer profile. Access all volunteer policies here.