Residual risk is the risk that remains after the control measures have
been taking into account.
If there
are no control measures in place the Residual Risk will be the same as the
Inherent Risk.
If there
are control measures in place it will reduce the Inherent Risk.