Which of the following statements is true of the risk appetite determination step within the enterprise risk management (erm) process of an organization? determining an organization's risk appetite involves identifying the top risks and assessing risks at the inherent level. determining an organization's risk appetite involves determining the organization's desired overall level of risk taking. determining an organization's risk appetite is the final step in the iterative enterprise risk management process. determining an organization's risk appetite requires input from a cross-functional team to capture all the threats—or risks—to the organization.