Actual Residual Risk Actual Residual Risk The risk remaining after management has taken action to alter its severity. 📚 Reference: NISTIR 8286 🏷️ Category: Cybersecurity 📊 Commonality: common