Question

A risk is the likelihood of a threat source taking advantage of a vulnerability to an
information system. Risks left over after implementing safeguards is known as:
A. Leftover risks.
B. Residual risks.
C. Remaining risks.
D. Exposures.

Answer 1

Answer:

B. Residual risks

Explanation:

Residual risks -  

It refers to the amount of risk from any action , which is left after the removal of the inherent risk or the natural risk , is referred to as residual risks.  

The value for the residual risk can be calculated as -  

Residual risk = inherent risk - impact of risk controls.  

Hence , from the scenario of the question,  

The correct term is residual risk .