According to COSO, the difference between inherent risk and residual risk arises because ofmanagement's: Action to reduce the inherent risk. Action to reduce the residual risk. Inability to reduce the inherent risk. Inability to share the residual risk.