business continuity
Using Residual Risk to Understand Program Effectiveness
Michael Herrera |
November 14, 2019
The simplest way to determine if a program is executable is to measure the level of residual risk across its critical recovery plans. What is residual risk? Residual risk is the risk that remains after all efforts have been made to identify and eliminate risk (i.e., your mitigating controls). The concept of residual risk has…