Which of the following statements are true of residual risk?
A . Residual risk has to be accepted.
B . Residual risk is the risk that remains after risk mitigation has taken place.
C . If residual risk is too great then the company should not expose itself to the risk situation.
D . Residual risk may be accepted if management feels the company can bear the risk.
E . Residual risk should never be accepted.
Answer: B,C,D