In risk management, it is common that not all risks can be completely eliminated. Residual risk is the remaining risk after all possible mitigation efforts have been applied. If the residual risk iswithin the organization's risk appetite-meaning the organization is willing to accept this level of risk-it is appropriate to proceed with the plan. The PMI framework supports this approach, as risk management is about balancing effort and benefit, ensuring that mitigation efforts are commensurate with the risk involved.