Risk Management
Risk Appetite Tolerance Breaches
Where actual exposure has exceeded board-approved appetite limits across strategic risk categories.
Why Track Appetite and Tolerance Breaches
A board-approved risk appetite is only meaningful if the entity actually knows when exposure has breached it, otherwise appetite is a statement rather than a control. Tracking breaches against approved limits is central to the board's King IV duty to set and oversee risk appetite and to hold management accountable when exposure exceeds it. AuditPro Core compares actual exposure to approved appetite limits across strategic categories so breaches are flagged for board attention rather than discovered after the fact.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Categories tracked
9
Appetite breaches
3
▲ 1 vs Q3
Within tolerance
5
56% of categories
Avg escalation lag
12 days
▼ 4 days
Categories by appetite status
Exposure against appetite by category
| Risk category | Appetite limit | Actual exposure | Status |
|---|---|---|---|
| Irregular expenditure | R 2.0 m | R 5.8 m | Breach |
| Liquidity / cash coverage | 30 days | 18 days | Breach |
| Revenue collection rate | 94% | 88% | Breach |
| ICT downtime | 12 hrs | 14 hrs | Tolerance |
| Vacancy rate (senior) | 10% | 9% | Within |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Appetite versus Tolerance
Risk appetite is the level of risk the entity is willing to seek in pursuit of its objectives; tolerance is the outer boundary it will accept before acting. Breaching tolerance is a clear trigger for escalation and corrective action.
From Statement to Limit
An appetite statement only bites when translated into measurable limits per risk category. Without limits, no one can say objectively whether exposure has crossed the line the board drew.
Breaches Demand a Response
A breach is not just a reporting fact but a call to act, by reducing exposure or by the board consciously revising appetite. An unactioned breach signals that appetite is being ignored in practice.
Appetite as a Steering Tool
Used well, appetite steers decisions before exposure builds rather than only flagging it afterwards. Breach tracking closes the loop between the board's intent and the organisation's actual risk-taking.
How AuditPro Core Bridges the Gap
- Limit reconciliation: actual exposure is compared against board-approved appetite limits per strategic category.
- Breach alerting: exposures that cross tolerance are flagged for board attention with the drivers exposed.
- Exception workflow: each breach routes to the risk owner for a response that is reducing exposure or formally revising appetite.
- Traceability to source: every limit links to its board approval and every exposure to its measurement basis.
Key Takeaways
- Appetite is risk sought; tolerance is the boundary before action is required.
- An appetite statement only bites once translated into measurable limits.
- A breach demands a response — reduce exposure or consciously revise appetite.
- Breach tracking closes the loop between board intent and actual risk-taking.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.