...which was to identify whether or not the residual risks were acceptable. Looking down his list of 120 risks and the poorset of existing controls that were in place, Arnold found himself recording ‘NO’ against each risk in the ‘Residual Risk...
http://www.continuitycentral.com/feature0575.htm