- Home
- All questions
- Question 30
CompTIA Security+ study material · question 30 of 611
Which quantity does an authorising official actually accept when granting an authorisation to operate?
Show the answer
Answer: C. Residual risk
Residual risk is what remains after the implemented controls are taken into account.
Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 § 3.6 Authorize