residual risk residual risk Portion of risk remaining after controls/countermeasures have been applied. 📚 Reference: NIST SP 800-161r1-upd1 🏷️ Category: Cybersecurity 📊 Commonality: common 📎 Related Terms:Acceptable Risk Minimum Level of Protection Total Risk