Which of the following BEST explains the concept of 'residual risk' in compliance program design?
-
A
The risk that remains after controls are applied
-
B
The total unmitigated risk facing the organization
-
C
The risk transferred to third parties through contracts
-
D
The risk identified but not yet assessed