Key facts
- A majority of banks formally embed risk appetite into business planning and investment decisions.
- Reliance on risk appetite metrics appears to lag in key areas.
- Four in five banks reported breaching risk appetite in the past year.
- Banks that reported no breaches often have skinnier appetite frameworks.
- 71% of banks automate the escalation of appetite breaches.
- North American banks have more developed enterprise risk management functions than European banks.
A majority of banks now formally embed risk appetite and mitigation activities into business planning and investment decisions, according to Risk.net’s latest Enterprise Risk Benchmarking research. However, reliance on these metrics appears to lag in key areas.
Four in five banks reported breaching risk appetite in the past year, with those reporting no breaches often having skinnier appetite frameworks, despite similar governance mechanisms. Approximately 71% of banks automate the escalation of appetite breaches, though automated processes are less common at banks where enterprise risk management (ERM) sets the overall risk appetite.