Residual risk
nouncandidate·updated May 9, 2026
The remaining potential risk after all IT security measures are applied. There is a residual risk associated with each threat.
Framework senses
- §1
- The remaining risk after management has implemented a risk response
Federal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary1 senseview framework →
- §1
- The amount of risk remaining after the implementation of controls.
- §1
- The remaining potential risk after all IT security measures are applied. There is a residual risk associated with each threat.
- §2 · sense_2_pending_review
- Portion of risk remaining after security measures have been applied.
- §1
- Portion of risk remaining after security measures have been applied.
- §1
- Portion of risk remaining after security measures have been applied.
- §1
- The remaining potential risk after all IT security measures are applied. There is a residual risk associated with each threat.