Skip to content

Net Risk

What is Net Risk?

The remaining level of risk after controls and mitigation measures have been applied, also known as residual risk.

Risk Management

Frameworks that govern net risk

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →

What the standards actually require on net risk

Requirements naming net risk across 2 standards, quoted from the control text.

French Sapin II Law (Law No. 2016-1691)1 control

The company must maintain a risk map: regularly updated documentation to identify, analyse and rank its exposure to external solicitations for corruption, notably by business sector and geography;

french-sapin-ii-law-law-no-2016-1691::17.II.3 · Article 17 II 3°: a documented, regularly updated corruption risk map →
IEC 31010:20191 control

Where a measure of risk combining consequence and likelihood is useful, qualitative, semi-quantitative or quantitative approaches may be used. Semi-quantitative scales are validated and used with care and their calculation basis explained.

iec-31010-2019::6.3.7.1 · 6.3.7.1 Determining measures of risk →

Questions people ask about net risk

What is Net Risk?
The remaining level of risk after controls and mitigation measures have been applied, also known as residual risk.
Why is Net Risk important for compliance?
Net Risk is a key concept in Risk Management. Understanding net risk helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Net Risk?
Net Risk appears in the requirement text of French Sapin II Law (Law No. 2016-1691), IEC 31010:2019. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Net Risk?
Explore our compliance framework pages to see how net risk applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Net Risk applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.