Risk tolerance describes the amount of risk exposure an organization is willing to tolerate in a project. It is known at the start of a project or becomes clear during the project. Risk appetite describes the organization's willingness to take on risks in anticipation of the rewards the risks will bring.