Which of the following best describes residual risk in the context of risk management? The risk that is completely eliminated by preventive measures The risk that is transferred to another party through insurance policies. The risk that remains after implementing controls and mitigation measures The risk that arises due to external factors beyond an organization's control