Explanation
During the define requirements step of ZT planning, the organization will define its risk appetite, which is the amount and type of risk that it is willing to accept in pursuit of its objectives. Risk appetite reflects the organization's risk culture, tolerance, and strategy, and guides the development of the ZT policies and controls. Risk appetite should be aligned with the business priorities and needs, and communicated clearly to the stakeholders.
References =
Certificate of Competence in Zero Trust (CCZT) prepkit, page 7, section 1.3 Risk Appetite Guidance Note - GOV.UK, section "Introduction" How to improve risk management using Zero Trust architecture | Microsoft Security Blog, section "Risk management is an ongoing activity"