Residual Risk

The Risk remaining after Risk Mitigation and Enforcement actions have been implemented.

Source: Gemara

Industry Cross-Reference

Industry Equivalent: Actual Residual Risk

Residual risk is the risk that remains after management has taken action to alter its severity, such as implementing mitigating security controls or remediation efforts.

Source: NIST CSRC Glossary - Actual Residual Risk