Certified Authorization Professional – CAP – Question186 Which of the following describes residual risk as the risk remaining after risk mitigation has occurred? A. DIACAP B. ISSO C. SSAA D. DAA Show Answer Hide Answer Correct Answer: A