What type of risk control aims to align with board-approved risk appetite?

The alignment of risk control with a board-approved risk appetite is best represented by administrative controls. Administrative controls comprise the policies, procedures, and governance structures that establish the framework for risk management within an organization. These controls are critical in defining what constitutes acceptable levels of risk, ensuring that all activities align with the strategic objectives and the risk tolerance set forth by the board of directors.

They typically include aspects such as risk assessment processes, reporting structures, compliance programs, and personnel training. By establishing these controls, organizations can better manage potential risks and ensure that their operations do not exceed the risk appetite established by the board. This demonstrates a proactive approach to risk management, reinforcing the organization's commitment to overseeing and mitigating risks effectively, as guided by governance principles.