Which of the following statements is true about residual risks?
A.
It is the probabilistic risk before implementing all security measures.
B.
It is the probabilistic risk after implementing all security measures.
C.
It is a weakness or lack of safeguard that can be exploited by a threat.
D.
It can be considered as an indicator of threats coupled with vulnerability.