Which of the following relations correctly describes residual risk?

Which of the following relations correctly describes residual risk?

A.
Residual Risk = Threats x Vulnerability x Asset Gap x Control Gap

B.
Residual Risk = Threats x Exploit x Asset Value x Control Gap

C.
Residual Risk = Threats x Exploit x Asset Value x Control Gap

D.
Residual Risk = Threats x Vulnerability x Asset Value x Control Gap