An Examination of Residual Risk in Projects