Residual Risk
The residual (or net risk) indicates the risk to which the organization remains exposed after management has processed the risk.
Computation method
The residual risk is computed based on the inherent risk (Impact * Likelihood) and the control risk level.
Possible values
• Very Low (1)
• Low (16)
• Medium (81)
• High (256)
• Very High (625)
