Question 12
Domain 1 — Governance and Risk Management FrameworksWhat is the relationship between risk culture and risk appetite?
Correct answer: B
Explanation
Risk culture shapes the behaviors, values, and decision-making that determine how an organization views risk. Because risk appetite is the amount and type of risk an organization is willing to accept, culture influences how that appetite is "understood and applied" in practice.
Why each option is right or wrong
A. They are unrelated concepts
B. Risk culture influences how risk appetite is understood and applied
Risk appetite is the board-approved level and type of risk an organization is willing to accept, but it only has practical effect if people interpret and act on it consistently. Risk culture provides the shared values, norms, and behaviors that determine whether that appetite is treated as a real decision boundary or merely a statement on paper, so culture directly affects how it is understood and applied across the organization.
C. Risk appetite always overrides culture
D. Culture only affects operational risks