residual risk


risk remaining after risk control measures have been taken