$100M revenue can't justify $1B in expected AI loss.
AI risk appetite is your hard line. It forces honest math:
Start with the reward.
Then set limits you can defend.
Include real loss drivers:
-> Regulatory fines
-> Breach costs, downtime, and legal fees
-> IP leakage and model training on your data
Then you can approve tools with confidence.
And pick controls worth the cost.