Residual risk
Course: AP® Cybersecurity Shows up in: Unit 2: Securing Spaces
The risk that remains after an organization has avoided, transferred and mitigated what it can; the level it chooses to accept.
Appears in the course and exam description (CED): 2.1.E.5
Why it matters in Unit 2
Absolute security is unattainable, so some risk is always accepted.
Example
After adding MFA and backups, the school accepts the small chance of a new zero day.
Learn it properly, with a checkpoint 2.1 Cyber Foundations