We have covered a lot of ground in this series. In Part 1 (Not Dying Is Not an Effective Strategy), we looked at why ‘not dying’ is not an effective strategy in today’s world, and how decades of safety-first messaging can quietly tip into safety-only behavior. In Part 2 (Risk Appetite Is Not a Binder on a Shelf), we made the case for risk appetite as a genuine strategic tool, not a compliance exercise.
Now the harder but more fun part: doing something with it.
Start with an Honest Conversation
Before you touch a single document or policy, have a frank conversation at the board or executive level. The questions to ask are often uncomfortable in the way that useful questions usually are. Friction is intentional.
Where have we played it so safe that we have essentially opted out of competing? Which markets, products, technology, or member segments have we quietly abandoned without ever really deciding to? Where are we protecting today’s comfort at the expense of tomorrow’s relevance?
This is not a blame exercise. It is a reality check. Safe and shrinking is a form of risk, and you cannot build a useful appetite until you are honest about where your current one has taken you. Call it the “where are we just not dying?” conversation. It is worth having before you put anything in writing.
Write Simple Qualitative Statements
You do not need to start with metrics or thresholds. Begin with plain-language statements across your main risk categories: compliance, credit, information security, interest rate, liquidity, reputation, strategic and transaction. Ensure the conversation and related statements tie back to your mission and key objectives.
For each, write a few honest sentences. How much risk are you willing to accept? In what circumstances would you stretch? What is clearly outside your comfort zone? The key is to anchor these to your mission and current strategy, not your last exam report. They should sound like your organization, not like someone else’s regulatory boilerplate.
If your risk appetite statement could be dropped into any other credit union’s policy manual without anyone noticing, it is too generic. It should reflect your specific strategy, your market, your membership, and your board and leadership’s actual convictions about growth and risk.
Tie It to Real Decisions
Risk appetite becomes real when it touches something that matters. Theoretical frameworks stay on shelves. Frameworks that inform actual decisions become part of how the organization thinks.
Pick a handful of decisions coming up in the next six to twelve months. Entering or exiting a product line. Investing in digital infrastructure or a core upgrade. Forming a new fintech partnership. Deciding how deeply to integrate AI into your operations and member experience. Considering what it looks like to truly engage your staff.
Run each decision through your appetite statements. Does this initiative fit? If not, are you consciously willing to operate outside of appetite for this decision, and if so, why? What controls would you need to feel comfortable? Documenting those conversations does more than satisfy examiners. It teaches the organization how to use risk appetite as a living tool rather than a shelf document or a paper weight.
Make It Part of Governance
Once you have a working set of statements, do not wait three years to look at them again. Build a brief appetite alignment check into strategic planning and all major decisions. Reference it in ERM reports and ALCO discussions. Use it to explain, in plain language, why you are investing where you are.
Repetition is how a document becomes a mindset.
Three Pitfalls to Watch For
Appetite that just restates regulations.
If every statement reads like a paraphrase of existing regulation, you are not describing appetite. You are restating the floor. Appetite should define where you want to operate inside those regulatory boundaries, not simply echo what you must do.
Board and management misalignment.
One of the most damaging patterns we see: the board believes the credit union has a moderate appetite while management believes it is low, or vice versa. Everyone is being careful, but not in the same direction. The fix is not agreeing on a label. It is having a real, facilitated conversation about what kinds of investments, uncertainty or volatility the board can live with, what strategic bets management believes are necessary, and where both sides are genuinely willing to stretch. Alignment is key!
Appetite that lives in a binder and nowhere else.
A statement that no one references, no one can explain in plain language, and no one connects to actual decisions is not a strategic tool. It is a compliance artifact. The value comes from using it, not from having it.
The Question Still Stands
The original question from our 2014 “Are You Living or Just Not Dying?” resonates as much as ever.
In 2014, it was a nudge toward a more honest conversation about risk. Today, it is a strategic necessity. Safe, secure, and shrinking is not a sustainable path. At some point, survival without relevance becomes its own kind of failure.
Relevance is the result of clear purpose, conscious choices about where to take risk, and consistent alignment between what you say you want and what you are actually willing to do. Risk appetite sits at the center of those choices. Done well, it gives your board and leadership team the courage and clarity to step out of the cave, look honestly at the landscape, and move with intention.
That is the work. And it is work worth doing.
If you want to know where your risk program stands today, a good place to start is Rochdale’s Risk Program Self-Assessment: a straightforward tool designed to help credit union leaders see their program honestly, not just the way it looks on the last exam report. If you would rather start with a conversation, we are easy to reach. Rochdale works with credit union boards and leadership teams on risk, governance, and strategy. We would be glad to talk.
Part 1 of this series: “Not Dying Is Not a Strategy for 2026“
Part 2 of this series: “Risk Appetite Is Not a Binder on a Shelf“
This series builds on our 2014 piece, “Are You Living or Just Not Dying?”