The risk that remains after controls have been applied is called _____ risk.
Answer
residual
Explanation
### Why this is right
The term **residual risk** names the exposure left after an organization applies controls and reassesses the scenario.
### The concept
Controls are intended to reduce the likelihood or impact of harm, but they do not automatically remove every weakness or threat. Reassessment checks how much risk remains after the controls are considered. That remaining exposure may require further treatment or acceptance by the organization.
### Terms
- **Residual risk**: Risk remaining after controls are applied.
### Remember
The word residual signals what remains.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free