Enterprise risk & controls · Core

Residual risk

Also called: net risk

ELI5

Risk remaining after controls and mitigation are considered.

Used in conversation

“Can we separate the likelihood of residual risk from its potential impact?”

Pitch context

You will see “Residual risk” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches enterprise risk & controls.

Why it matters: In enterprise risk & controls, a loose definition can change rights, obligations, approval, disclosure or enforceability.

Caution

Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.

Sources & evidence · 3

Direct term-level sources and supporting source families.