Zero days are a type of residual risk that can’t be eliminated.
Risk probability theory can help quantify uncertainty and structure the decision making process.