Residual risk

The amount of risk remaining after the implementation of controls.