CRISC: Certified in Risk and Information Systems ControlDemo

Risk mitigation applies controls to lower the risk that remains after treatment. That remaining exposure is residual risk; inherent risk is the exposure before controls are applied.