Risk Control Level Selection
Target risk
For a given risk, you can define the level of risk acceptable for the organization.

The target risk presents the residual risk value expected by the risk manager after treatment of the risk.
If this risk level is higher than or equal to the previously assessed risk, the organization can accept the risk as it stands.