We do not have a policy on establishing a risk tolerance matrix. The county does need to determine the level of risk they will be willing to tolerate as part of their risk assessment process. This would be a management decision, there is no requirement that they have adopted a formal risk tolerance matrix.