d. To assess what risk remains after controls are applied
Measuring residual risk is essential for understanding the level of risk that persists after implementing risk management controls. This information is crucial for making informed decisions about further risk treatment, resource allocation, and organizational priorities.


