After controls: 0 high, 1 medium, 4 low. No risk sits high after controls, but 1 remains medium; decide whether to treat or tolerate each.
A risk register scored from inherent rating to residual rating
Every risk is scored for likelihood and impact to set an inherent rating, and the residual column shows what a working control leaves behind: a residual as high as the inherent means the control is not yet doing its job, while one that falls to low sits within appetite.
