residual risk

{
  "id": "MLC-T-CYB-003553",
  "term": "residual risk",
  "field": "Cybersecurity",
  "definition": "1. Portion of risk remaining after security measures have been applied.\n\n2. Portion of risk remaining after controls/countermeasures have been applied.\n\n3. Risk that remains after risk responses have been documented and performed.",
  "references": [
    "CNSSI 4009-2022; NIST SP 800-30 Rev. 1; NIST IR 8323r1",
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update]",
    "NISTIR 8286",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/residual-risk/"
}