Cyber risk appetite helps business leaders decide which risks require action, which risks can be monitored and which risks must never be accepted.