Problem Statement
What is residual risk?
Explanation
Residual risk is the portion of risk that still exists after security measures are in place. No control completely removes risk, so organizations must decide if the remaining level is acceptable or needs further treatment.
