"The entity’s risk appetite is reflected in entity strategy, which in turn guides resource allocation. Management allocates
resources across business units with consideration of the entity’s risk appetite and individual business units’ strategic
plans to generate a desired return on invested resources. Management looks to align the organization, people, processes and
infrastructure to facilitate successful strategy implementation and enable the entity to stay within its risk appetite."
COSO