The level and type of risk that an institution is willing to take on in its exposures and activities in order to achieve its strategic objectives and obligations.