Risk Appetite
Risk appetite is the amount of risk that your organization is willing to accept to meet its business goals. In Qualys Enterprise TruRisk Management (ETM), risk appetite defines the level of risk that is acceptable for your organization as a whole and for each business entity. You set the company risk appetite in Configuration > Company Profile and the risk appetite of each business entity in its settings. Qualys recommends a risk appetite of 400, which is also the value ETM uses for a business entity that has no risk appetite set.
Risk appetite gives your security program a clear goal. Without it, teams cannot tell when risk is low enough or which risk requires action first. When you define risk appetite, you can compare current risk against an agreed limit and focus remediation on the risk that exceeds it.