Acceptable Risk

Acceptable Risk

The level of Residual Risk that has been determined to be a reasonable level of potential loss/disruption for a specific IT system.

See NIST SP 800-16 for more information.

Share this Post