Which of the following statements BEST describes risk appetite?

A. Acceptable variation between risk thresholds and business objectives
B. The amount of risk an organization is willing to accept
C. The effective management of risk and internal control environments
D. The acceptable variation relative to the achievement of objectives