residual risk
as defined in Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security…, Article 35, point (d) (Definitions)
the risk which remains after security measures have been implemented, given that not all threats are countered and not all vulnerabilities can be eliminated;