The risk appetite statement for Alibaba should be a detailed document which covers the risk appetite and tolerances of the team’s project organization. The document summarizes the team’s recommendations and solution in a format suitable for review by a C-suite or Board of Directors. Any assumptions made in determining the risk appetite must be listed.