Risk Acceptance Criteria and Residual Risk

Cesar,

Residual risk is the risk that has remained after the treatment of risks - for example, if you had a risk that had a level of 9, and by treating it you have reduced it to 6, this level of 6 is the residual risk.

After you calculate this residual risk, you have to see whether it is acceptable - for example, if your acceptable level of risk is 7, this would mean that this residual risk of 6 is acceptable; if your acceptable level of risk is 5, in such case you would need to reduce this risk further, or ask the risk owners to explicitly accept such risk without reducing it further.