Board-set limits by category, vs current exposure.
Zero tolerance for material regulatory breach. Limited tolerance for remediation slippage beyond 30 days.
Zero tolerance for systemic AML/CFT failure. No appetite for sanctions exposure.
Cautious appetite. Recovery time objective ≤ 4h for client-facing systems.
Zero tolerance for foreseeable harm to retail clients.
Limited appetite for concentration above 25% of critical service in any single provider.
Open appetite for measured growth within capital and conduct limits.