CORE

Residual risk

The risk that's still left over after controls have been applied. No control gets risk to zero.