Risk Tolerance

The level of risk an entity is willing to assume in order to achieve a potential desired result.
SOURCE: SP 800-32

The defined impacts to an enterprise’s information systems that an entity is willing to accept.
SOURCE: CNSSI-4009