Setting acceptable levels
What is the level of risk tolerance of the organization
- Risk averse?
- Risk neutral?
- Risk tolerant?
Does this vary with
- The type of project?
- The criticality of the product?
- The type of risk?
- The location or department, etc
- Get executive buy-in to these answers !