define risk policies
Define the extent and kinds of risks an organisation is willing to take in pursuing its objectives based on the organisation’s ability to absorb losses and the rate of return it seeks from its operations. Implement concrete risk tactics to achieve that vision.