Residual risk is the:

A.
Security risk remaining after implementing controls

B.
Weakness that can be exploited by a threat

C.
Risk that remains after risk analysis

D.
Result of an unwanted incident

Explanation:
Residual risk is the security risk that remains after controls have
been implemented.