home/glossary/Residual risk

Residual risk

nounid 3866·updated May 9, 2026
verified

The risk to the achievement of objectives that remains after management's response has been designed and implemented.

polysemousMWE

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

Entity Type

Metric85%llm-generatedllm:claude-haiku-4-5

Sensitivity

unclassified

Information Class

unclassified

Variants

plural
Residual risks
possessive
Residual risk's
pluralpossessive
Residual risks'

Framework definitions

ISACA Cybersecurity Glossary1 senseview framework →
§1
The remaining risk after management has implemented a risk response
Federal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary1 senseview framework →
§1
The amount of risk remaining after the implementation of controls.
NISTIR 7298: Glossary of Key Information Security Terms, Revision 22 sensesview framework →
§1
The remaining potential risk after all IT security measures are applied. There is a residual risk associated with each threat.
§2 · sense_2_pending_review
Portion of risk remaining after security measures have been applied.
CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →
§1
Portion of risk remaining after security measures have been applied.
NIST SP 800-301 senseview framework →
§1
Portion of risk remaining after security measures have been applied.
NIST SP 800-331 senseview framework →
§1
The remaining potential risk after all IT security measures are applied. There is a residual risk associated with each threat.
TSP Section 1001 senseview framework →
§1 · glossary
The risk to the achievement of objectives that remains after management's response has been designed and implemented.
Attribution from the CKI glossary mapping stage (glossary)
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
The remaining potential risk after all IT security measures are applied. There is a residual risk associated with each threat.
DR-088 backfill from the noun definition column

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.