fips191_36
FIPS PUB 191
3.5.3 Process 7 - Accept Residual Risk
After all safeguards are implemented, tested and found acceptable, the results of the risk
acceptance test should be reexamined.
The risk associated with the threat/vulnerability
relationships should now be reduced to an acceptable level or eliminated. If this is not the case,
then the decisions made in the previous steps should be reconsidered to determine what the
proper protections should be.
38