medium
Single Answer
0

Kimon is creating a report for management on the results of his most recent risk assessment. In his report, he would like to identify the remaining level of risk to the organization after adopting security controls. What term best describes this current level of risk?

Answer Options

A

Inherent risk

B

Residual risk

C

Control risk

D

Mitigated risk

Correct Answer: B

Explanation

The residual risk is the level of risk that remains after controls have been applied to mitigate risks. Inherent risk is the original risk that existed prior to the controls. Control risk is new risk introduced by the addition of controls to the environment. Mitigated risk is the risk that has been addressed by existing controls.