Tprm 101: Reporting On Residual Risk