Risicomanagement
Residual Risk
The risk level remaining after all identified mitigation measures have been implemented. Residual risk is the net risk level after controls and represents the exposure the organization consciously accepts, which must equal or be less than the target risk.
Source: ISO 31000:2018, COSO IC 2013