Risk Appetite, Tolerance & Limits That Constrain
Write appetite statements that actually stop the bad deal.
The executive challenge
The problem this program solves
Everyone owns a piece of risk appetite and nobody owns the consequence: three lines of defence that produce reports, not readiness. Risk that is documented rather than governed is discovered in a crisis — at the highest possible price. This is where risk appetite stops being a compliance artefact and becomes an executive discipline your board will recognise as one.
Context
Why this matters now
Capability
What you will be able to do
- Draft a risk appetite appetite statement that actually constrains decisions.
- Lead risk appetite incident command when the organisation is under pressure.
- Rehearse the risk appetite response before it is needed — command, disclosure and coordination.
- Quantify risk appetite exposure in money — loss scenarios, tolerances and stress tests.
The IPAT Course Standard
The five-day journey
Each day is a deliberate progression in managerial capability — from strategic context, to analytical frameworks, to applied practice, to executive judgement under pressure, to a capstone that produces something your organisation keeps.
IPAT Signature Case™
The Trader Who Offered to Win It Back
A star dealer at a port authority has concealed mounting risk appetite losses through fictitious confirmations. The hole now threatens a quarter’s earnings; audit is close, and the dealer proposes a win-back plan.
Your decision: Decide exposure, escalation and sequence: what the board, the regulator and the market hear — and in what order.
IPAT Data Lab™
The risk appetite incidents at a regional bank are individually small and collectively serious — and no one has connected them.
Dataset: Synthetic multi-year incident, near-miss and control data for a regional bank.
Your task: Build the heat map, test the tolerances, and write the 4 a.m. command card for the top exposure.
A risk appetite heat map, impact tolerances and an incident command card.
Data → Analysis → Decision, not Data → Code → Certificate
Day 5 · The Capstone
What will you change when you return to work?
Produce an enterprise risk and resilience blueprint for your institution: appetite, architecture, incident readiness and the investment sequence.
Methodology
Frameworks you will master
- • IPAT Decision Intelligence Framework™
- • IPAT Transformation Architecture™
- • Enterprise risk management (COSO ERM lineage)
- • Three lines of defence
- • Business continuity standards (ISO 22301-aligned)
Cohorts
Upcoming cohorts
New dates are being scheduled
Register with your preferred start date and our admissions team will match you to the next available cohort — or contact us to arrange an in-house delivery for your organisation.
Register your interestExplore further
Related programmes
Learners of Risk Appetite, Tolerance & Limits That Constrain frequently pair it with these offerings from the same divisions.
Digital Transformation Strategy
End-to-end digital reinvention.
View programme Digital TransformationData Governance, Cybersecurity and AI Governance
Secure and govern your data estate.
View programme Digital TransformationCybersecurity Awareness & Digital Risk
Build cybersecurity awareness and manage digital risk across the enterprise.
View programme