Explanation : In establishing a risk management system, determining risk tolerance must
happen before specific risks can be accepted or reduced. Risk tolerance
defines the appetite for risk. Risk budgeting determine how or where the
risk is taken and quantifies the tolerable risk by specific metrics. Risk
exposures can then be measured and compared against the acceptable
risk.