CompTIA Security+ Exam Prep

Answer: D - Once a company has navigated the issues of total threat, the company still must be concerned with residual risk. The goal of total risk is to reduce a company’s overall risk to an acceptable level, however no system can ever be 100 percent secure. The left over risk level is residual risk. Conceptual formula: (threats x vulnerability x asset value) x controls gap = residual risk.