| Course | WMBA 6623 Enterprise and Project Risk Management |
|---|---|
| Week | Week 9 |
| Paper type | Risk governance memo |
| Length | About 720 words, 4 pages |
| Format | Memo, APA 7 citations |
| School | Walden University |
| Program | Master of Business Administration (MBA) |
| Updated | October 2026 |
Free sample paper for WMBA 6623 Week 9
Memorandum
To: Risk Committee of the Board, Lakeshore Community Bank
From: Chief Risk Officer
Date: November 9, 2026
Re: Proposed risk appetite statement and category tolerances for 2027
Proposed Appetite Statement
Lakeshore Community Bank accepts moderate credit and interest rate risk to serve western Michigan households and businesses and to earn a return on equity of 10 to 12 percent. It has low appetite for liquidity, compliance and operational risk, and no appetite for conduct that harms borrowers or breaks the law. It will not pursue growth that requires capital ratios below its internal minimums or concentrations it cannot monitor.
Why the Bank Needs This Now
The bank, a composite $3.2 billion institution, has managed risk through policies and limits written separately by each function. The loan servicing consolidation exposed the gap: its largest risks, escrow errors and loss mitigation handling, were compliance and operational risks that no single policy owned. The COSO framework describes risk appetite as the amount of risk an organization is willing to accept in pursuit of value, set at the top and translated into tolerances that guide decisions (Committee of Sponsoring Organizations of the Treadway Commission, 2017). ISO 31000 similarly asks leaders to articulate risk criteria consistent with the organization's objectives (International Organization for Standardization, 2018). This memo proposes that translation.
Category Appetite, Tolerances and Thresholds
Table 1
Appetite by Category
| Category | Appetite | Tolerance | Early-warning threshold | Accountable executive | |
|---|---|---|---|---|
| Credit | Moderate: lend broadly within established underwriting | Net charge-offs under 0.40% of loans a year; no industry concentration above 200% of capital | Charge-offs above 0.30%; any concentration above 175% | Chief Credit Officer | |
| Interest rate | Moderate | Economic value of equity falls no more than 15% in a 200-basis-point shock | Decline above 12% | Chief Financial Officer | |
| Liquidity | Low | On-balance-sheet liquidity at least 15% of assets; borrowing capacity at least 25% of assets | Liquidity below 17%; capacity below 28% | Treasurer | |
| Compliance | Low; none for knowing violations | No examination findings rated as violations requiring restitution | Any repeat finding; any complaint trend up 25% in a quarter | Chief Compliance Officer | |
| Operational | Low | Operational losses under $750,000 a year; no servicing error affecting more than 500 borrowers | Losses above $500,000 year to date; any error affecting 100 borrowers | Chief Operating Officer | |
| Technology and cyber | Low | No customer data breach; core system availability at least 99.8% | Any confirmed intrusion; availability below 99.9% in a month | Chief Information Officer | |
| Reputational | Low | Customer satisfaction at least 85%; no unresolved regulatory or media issue lasting over 30 days | Satisfaction below 88%; any issue older than 14 days | Chief Executive Officer | |
Figures are proposed for a composite bank and will be calibrated against peer data before adoption.
How the Tolerances Work
Each tolerance is a limit the bank should not exceed. Each early-warning threshold is set inside the tolerance, so management has time to act before a breach. For example, the operational tolerance allows no single servicing error affecting more than 500 borrowers; its threshold triggers at 100, which is when a problem like the escrow risk in the servicing consolidation should come to the committee's attention.
The accountable executive for each category reports against its tolerance and threshold each quarter. A threshold crossed is reported to this committee at its next meeting with a plan. A tolerance breached is reported to the committee chair within two business days and to the full board at its next meeting.
Roles
Each business line is responsible for its own risks and must stay inside the tolerances set for it. The risk management function, which I lead, sets the framework, monitors positions and challenges business line assessments independently. Internal audit tests whether the framework works. Ellul and Yerramilli (2013) found that U.S. banks whose risk function carried more weight inside the holding company showed lower tail risk and better performance during the financial crisis, which supports giving this function the authority to escalate directly to the committee.
The appetite and tolerances will be reviewed each year with the strategic plan, and sooner if the bank's strategy or environment changes.
Decisions Requested
I ask the committee to recommend the appetite statement to the board for adoption at its December meeting; approve the category tolerances and thresholds for 2027, subject to calibration; and direct management to report against them beginning with the first quarter of 2027.
References
Committee of Sponsoring Organizations of the Treadway Commission. (2017). Enterprise risk management: Integrating with strategy and performance. COSO.
Ellul, A., & Yerramilli, V. (2013). Stronger risk controls, lower risk: Evidence from U.S. bank holding companies. The Journal of Finance, 68(5), 1757-1803. https://doi.org/10.1111/jofi.12057
International Organization for Standardization. (2018). Risk management: Guidelines (ISO Standard No. 31000:2018).
Reading the WMBA 6623 Week 9 instructions
The governance memo asks students to write, as a chief risk officer, a proposal to a board risk committee. Instructors expect three to four pages in memo form. The opening paragraph is an appetite statement of about eighty words that a board could adopt verbatim. A category table follows, covering areas such as credit, operational, technology and reputational risk, each with an appetite sentence, a quantified tolerance, an early-warning threshold and an accountable executive. Sections explaining how tolerances and thresholds work, the roles of business lines, risk management and audit, and the decisions requested complete the memo. Thresholds should be set inside tolerances so management has time to act. Each category's accountable executive should be a single role, and reporting cadence should be stated. Plain language helps directors adopt it.
How the WMBA 6623 Week 9 example is put together
The memo opens with an appetite statement for the bank. A section explains why the bank needs a unified framework, citing the COSO framework and ISO 31000 and linking the need to the servicing consolidation. A table sets appetite, tolerance, threshold and accountable executive for credit, interest rate, liquidity, compliance, operational, technology and reputational risk. A section explains how thresholds trigger reporting before breaches. A roles section describes the three lines and cites Ellul and Yerramilli on risk function strength. A note on annual review precedes three decisions requested of the committee. Margin comments flag the appetite statement and the tolerance logic. Figures are labeled as proposals to be calibrated before adoption.
WMBA 6623 Week 9 rubric: what earns full marks
Graders reward an appetite statement concise and specific enough for a board to adopt. Category tolerances that are quantified, with thresholds inside them and named executives, carry significant weight. Explaining how thresholds and tolerances trigger action shows practical design. Clarifying roles and independence demonstrates governance understanding. Specific decisions requested make the memo actionable. Memos that separate who owns a risk from who checks it, by name and committee, meet the governance standard of the week. Memos that explain what happens when a threshold or tolerance is crossed, and who is told, show practical governance. Tolerances that can be measured with data the organization already collects make the framework workable from its first quarter.
WMBA 6623 Week 9 help from the desk
Write the appetite statement first, in plain language, saying which risks the organization takes willingly and which it avoids. Then turn each category into a number the organization can measure and a lower number that gives warning. Name one executive accountable for each. Explain what happens when a threshold or tolerance is crossed. Students often lose marks by writing appetite as general principles, by omitting numbers or by naming committees as owners. Another frequent gap is no link between appetite and reporting. If you need a custom sample governance memo for an organization you know, send us its main risk categories.
Get a WMBA 6623 Week 9 example written to your instructions
Share the Week 9 prompt, the rubric, and the industry your instructor assigned. What lands is a memo separating appetite, tolerance and limit by category, with an executive named against each line. It is free on a first request and returns in 24-48 hours, written in the register a committee actually reads.
More WMBA 6623 papers and MBA samples
- WMBA 6623 Week 1: Named Risk Discussion Post
- WMBA 6623 Week 2: Project Risk Identification Table
- WMBA 6623 Week 3: Project Risk Register
- WMBA 6623 Week 4: Qualitative Risk Scoring Matrix
- WMBA 6623 Week 5: Risk Score Challenge Replies
- WMBA 6623 Week 6: Quantitative Risk Analysis
- WMBA 6623 Week 7: Risk Response Plan
- WMBA 6623 Week 8: Risk Contingency Reserve Brief
- WMBA 6623 Week 10: Risk Escalation Protocol
- WMBA 6623 Week 11: Quarterly Enterprise Risk Report
- WMBA 6627 Week 9: Team Norms Behavior Memo
- WMBA 6620 Week 9: Change Control Procedure
- WMBA 6615 Week 9: Promotion Rule Reward Brief
- WMBA 6608 Week 1: Third-Party Payment Post
WMBA 6623 Week 9 questions, answered
Where can I find a free WMBA 6623 Week 9 sample paper?
The risk appetite governance memo for a community bank is posted in full on this page.
What does the appetite statement say?
Moderate appetite for credit and interest rate risk, low for liquidity, compliance and operational risk.
How many categories are covered?
Seven, each with a tolerance, a threshold and an accountable executive.
What is the operational tolerance?
Losses under $750,000 a year and no error affecting more than 500 borrowers.
What decisions are requested?
Recommending the statement to the board, approving tolerances and starting reporting in 2027.