Which of the following statements is true about residual risks

A.
It can be considered as an indicator of threats coupled with vulnerability.

B.
It is a weakness or lack of safeguard that can be exploited by a threat.

C.
It is the probabilistic risk after implementing all security measures.

D.
It is the probabilistic risk before implementing all security measures.