risikoholdning

Risikoholdning is a term used in risk management to describe the overall stance of an organization or individual toward risk. It combines the level of risk the entity is prepared to accept (risk appetite), the tolerances for deviation from desired outcomes (risk tolerances), and the capacity to absorb losses or disruptions (risk capacity). The concept is influenced by governance structures, organizational culture, strategy, and the control environment, and it helps shape how risks are identified, analyzed, and addressed.

A risk-conscious posture informs decision-making, prioritization of investments in controls and resilience, and the speed and scope of response to incidents. A conservative risk posture typically favors stronger controls, higher resource allocation for risk reduction, and lower residual risk, whereas an aggressive posture accepts greater residual risk in pursuit of opportunities.

Assessment of the risk posture is usually done through risk assessments, maturity models, risk heat maps, and indicators of control effectiveness. Because risk and business conditions evolve, the risk posture is dynamic and can shift with leadership changes, market developments, regulatory pressures, and notable incidents.

In practice, the concept is used across domains such as financial risk management, cybersecurity, safety engineering, and project governance. It aligns with established frameworks like ISO 31000 and COSO, and with organizational constructs such as risk appetite statements, risk tolerance levels, and risk governance structures.