Which of the following BEST illustrates residual risk within an organization?

A. Risk management framework
B. Risk register
C. Business impact analysis
D. Heat map