Residual risk
Risk remaining after controls; the v1 methodology does not estimate or certify it.
Definition
Risk remaining after controls; the v1 methodology does not estimate or certify it.
Practical test
What uncertainty and consequence remain after the selected controls, without treating control presence as proof of safety?
Example
Citation review may reduce unsupported market claims, while incomplete sources and reviewer mistakes remain residual risks.
What to record
For residual risk to be operational rather than a reassuring label, record known limitations, untested cases, control failures, monitoring signals, owner, and review date. If those facts cannot be observed or tested, do not treat the term itself as evidence that the workflow is safe.