Inherent vs. Residual risks