Determining acceptable risk

In the business world, acceptable risk levels would be defined and stated in a manner consistent with overall corporate goals and policies (e.g. legal, financial, public image, potential or public harm) and be specific enough to allow staff to apply to real world situations.