Residual Risk (See also Target Residual Risk)

The remaining, potential risk after all security measures are applied. There is a residual risk associated with each threat.

Retrieved from NIST SP 800-33 (2018)  https://csrc.nist.gov/glossary/term/residual-risk