Which of the following statements is true about residual risks?

A.
It is a weakness or lack of safeguard that can be exploited by a threat.

B.
It can be considered as an indicator of threats coupled with vulnerability.

C.
It is the probabilistic risk after implementing all security measures.

D.
It is the probabilistic risk before implementing all security measures.