Which of the following describes residual risk as the risk remaining after risk mitigation has occurred?

A. DIACAP
B. ISSO
C. SSAA
D. DAA