What is the purpose of monitoring residual risk after implementing controls?

• A. To document risk for records.
• B. To declare risk eliminated.
• C. To evaluate remaining risk and adjust controls as needed.
• D. To assign blame for hazards.

Answer: (C)